in reply to Re^5: How to avoid Null Byte Injection
in thread How to avoid Null Byte Injection?

You are right i must of coutse be more precise.
Actually i did made it work :-)
my $passage = param('select') || "Αρχική + Σελίδα!"; Encode::from_to($passage, "utf8", "ISO-8859-7") if param(); if ( param('select') ) { unless (grep { $_ eq param('select') } @display_files) { $passage = "*Backward Directory Traversal* hack will NOT help you +here, Mighty Lamer!"; print br() x 2, h1( {class=>'big'}, $passage ); $select = $dbh->prepare( "UPDATE guestlog SET passage=?, date=?, +counter=counter+1 WHERE host=?" ); $select->execute( $passage, $date, $host ); exit; }
Actually inside grep function i had to sue param('select') and not variable $passage not sure why though...