Succuri incorrectly tuned

[snb]

I couldn't post this code because of the restrictions of the succuri firewall.
I had to insert an underscore in line 1 to let it pass:
Can someone ignite the 'technicians' ?

Please Login or Register  to view this content.

[FDibbins]

I have pushed this to the TT

[pjwhitfield]

Ive got a corker here, it wont let me post the following because of "HTML code" but for the life of me I cant find the offending part (ive marked the data as CODE in this post but its just a standard post in the thread.

Please Login or Register  to view this content.

EDIT: Sussed it, it was the On_Click without an underscore.

[Doc.AElstein]

This appears to be the offending character combination:

exec("cm

I am using the “Black Character” trick to post it here, to do that this is an example of what you can write in the Editor Widow to get the combination to appear normally after posting and by passing the Succuri HTML problem

ex[COLOR="#000000"]e[/COLOR]c("cm

Alan

P.s.

I do not see any problem with

onClick

or

OnClick

[snb]

Please Login or Register  to view this content.

[Doc.AElstein]

Sucuri is weird. I had problems again with posting. It took me 2 hours to post a Post. So I had another quick play about

These are the results of that:

This is OK:

exec("c
_.. but only as the very last entry in a post !!

These all cause the sucuri Paddy
exec("c g
Exec(e
exec(“h
exec(“&
exec(""
exec(
exec(g
exec("gm
exec("ct
exec("hm
exec("cw
exec(“j
exec (
exec
Exec
eXec

so it is indeed mainly the exec which is the main problem here . It is just an exception which caught me out that , .. this:

exec("c

strangely works, but only as the very last thing in a post !!!

So I should have said in Post #4:

Exec ( case insensitive : eXec exEc ) is a problem string for sucuri.
An exception is

exec("c

on its own line as the last entry in a post.


This following character string __ exec("c __ is still not accepted by sucuri because things come after it,

exec("c
h KJHN Dk
hfksfhh


The following would be accepted by sucurri, as long as nothing comes after it !! Not even blank spaces are allowed after it !!! It must be the very last thing in the Post

exec("c