I am trying to write php script in a file.It was sure to get Parsing error on that.Help me assign php code to a php variable so i can write it on code.
<?php
$myFile = "testFile1.php";
$fh = fopen($myFile, 'w') or die("can't open file");
$stringData = "<?php some php code with functions ?>";
fwrite($fh, $stringData);
fclose($fh);
?>
Put the string in single quotes, that you want to write to the file, otherwise it's interpreted.
$stringData = '<?php some php code ?>';
Alternatively, you could escape the code, see the chapter "Strings" in the php manual for more details: http://php.net/manual/en/language.types.string.php
Use single quotes:
<?php
$myFile = "testFile1.php";
$fh = fopen($myFile, 'w') or die("can't open file");
$stringData = '<?php some php code ?>';
fwrite($fh, $stringData);
fclose($fh);
?>
' in it? Heredoc might be better.For example:
<?php
$myFile = "testFile1.php";
$fh = fopen($myFile, 'w') or die("can't open file");
$var1 = 'value1';
$var2 = 'value2';
$stringData =
'<?php $var1 = ' . $var1 . ';
$var2 = ' . $var2 . ';
do_something($var1); ?>';
fwrite($fh, $stringData);
fclose($fh);
?>
So just use single quotes to make sure php won't parse vars as php vars themselves, and use concatenation to put var value in the file. You also probably may use var_export($var, true) function in some cases.
Split the problem. Just like in JavaScript you use <\/script> or "<"+"/script", in PHP you can write "?".">".
This prevents the ?> token from being recognised.
Additionally, NOWDOC is intended for putting PHP code in a string:
$phpcode = <<<'END'
Blah blah blah
This is code with $variables, functions() and {$complex['syntax']}
END;
Why would you want to do this? Anyways, you can't. But you can ask PHP for a ransoms temp file name, create that file, write the code there, then include the file.
Also, you need to use single quotes otherwise PHP will attempt to interpret it.
$phpCrapThatWillMakeSiteVulnerableToHacking = '<?php echo "Welcome to my easially hackable website. Now I will execute $_POST["code"]!"; ' . $_POST["code"] . ' ?>';
$fileName = tempnam("/tmp", "derp");
$handle = fopen($fileName, "w");
if ($handle === FALSE)
{
die("I derped");
}
fwrite($handle, $phpCrapThatWillMakeSiteVulnerableToHacking);
fclose($handle);
include($fileName);
