Am I this stupid? | Defend the Web

mathissa
7 years ago

0

So, I’m stuck on this level. I have watched the other posts on this forum and I think I pretty much know how to solve this level by now. However i can’t seem to find the right index (is that called index?) to put in de URL . I type: www.hackthis.co.uk/*index*.php... So my question to any of you, what do I have to type for that index. I already tried all I can think of, but it just won’t work. So am I just really stupid or…

I didn’t find any thread/post about this problem before, so I decided to make my own :p

b1nary
7 years ago

0

you dont have to send it to index.php , just send it via GET to
https://www.hackthis.co.uk/levels/intermediate/1

DOSmaster
7 years ago | edited 7 years ago

0

So…. It can be done in various ways.. :P
To be honest it’s easier then you think right now.

Here is some info, if you can read properly you will get my hint:
[s]The POST method transfers information via HTTP headers. The information is encoded and put into a header called QUERY_STRING.[/s]
The POST variable is an array of variables that is send within the body of the HTTP request. $POST is also a superglobal, which means that it is available in all scopes throughout a script. <- Oops.
The PHP $REQUEST variable contains the contents of both $GET, $POST and $_COOKIE.

So what does GET do?

Sorry Sir/Madam, that sounds like a typical case of pebkac... Please buy our anti-virus to solve your pebkac for just $420. ![Image](http://i.imgur.com/CurKUQt.png)

mathissa
7 years ago

0

Thanks for the response.

I think there might be a bug or something might be blocking me from using the GET method here, because whenever i put: https://www.hackthis.co.uk/levels/intermediate/1.php?.... , i get an error saying: “Error accessing resource”. It doesn’t matter what I type after the “.php?”.

Any idea why this happens?

dloser
7 years ago

0

Instead of making things up, just use the actual address of the level. ;)

@DOSmaster**: POST doesn’t put the data in headers and there is no header called QUERY_STRING.

mathissa
7 years ago

0

Okay yes, i got it. Thanks!