I am trying to get a site to run a php script. The site runs on phpbb3. I have already found an exploit; a portion of the site uses connects to a database and retrieves and displays information upon load. Now i do not have access to the site itself but i do have access to the database. I have tried putting my script in a database filed so it would be executed when page loads, but unfortunately PHPBB3 seems to be filtering it out. So i have been limited to just plain html and JavaScript.
some details
this is how it is displayed
Code: Select all
$template->assign_block_vars('faq_block.faq_row', array(
'FAQ_ANSWER' =>
"<tr><td>"
.$field['number']
."</td><td>"
.$field['props']
."</td><td>"
.$thing2
."</td></tr>"
));
Thanks