SHOW:
|
|
- or go back to the newest paste.
| 1 | <?php | |
| 2 | ||
| 3 | class EjemploDePHPObjectInyection {
| |
| 4 | ||
| 5 | public $comando=null; | |
| 6 | ||
| 7 | public function __destruct() {
| |
| 8 | ||
| 9 | - | system($comando); |
| 9 | + | system($this->comando); |
| 10 | } | |
| 11 | ||
| 12 | ||
| 13 | } | |
| 14 | ||
| 15 | $ejemplo = unserialize($_GET['cod']); | |
| 16 | ?> |
