Submit file and echo

newbtophp

Can anyone help please?

I'm trying to submit a php file, which will then echo the html output (browser view source) of the submitted php file.

The trouble is I can't get the html output inside the textarea (html source = when the $file is run > browser > view source.)

This is what I've come up with:

<form method="post" action="<?php echo $PHP_SELF;?>" enctype="multipart/form-data">
<input type="file" name="code" value="Upload" />&nbsp;
<input name="submit" type="submit" value="code" />
<br />

<?php

if (isset($_FILES['code'])) {
$file = file_get_contents($_FILES['code']['tmp_name']);

echo '<form>
<textarea style="width:100%; height:300px;">'.$file.'</textarea></form>';
}
?>

Cheers

dagon

try htmlspecialchars() or htmlentities() on the $file

newbtophp

dagon;10921662 wrote:
try htmlspecialchars() or htmlentities() on the $file

I've tried both, they just do the same thing, they echo the uploaded php file in the text area. Where as I dont want the original php file, Im trying to find a way to echo the html source of the uploaded php file.

So the echo'd should be what you would see when you open $file and right click > view source in your browser.

dagon

so you need to parse the php first? of a user uploded file (very dangerous) what is it you actully want to achieve?

newbtophp

dagon;10921665 wrote:
so you need to parse the php first? of a user uploded file (very dangerous) what is it you actully want to achieve?

I want visitors to be able to see their html source of their php files.

dagon

and if the put the php in it to delete everything on your server? Not all php files produce any html, or output of any kind.

newbtophp

dagon;10921669 wrote:
and if the put the php in it to delete everything on your server? Not all php files produce any html, or output of any kind.

php file is not storing anything on the server, it just submits and echos, if the html output is none then it will display none

dagon

you cant know its output unless you parse the php, which could do anything.