nyx/tests/fixtures/ldap_injection/php/baseline_constant_ldap.php
2026-05-07 01:29:31 -04:00

4 lines
199 B
PHP

<?php
// Baseline: filter is a literal string, no taint reaches the sink.
$ds = ldap_connect("ldap://example.com");
$result = ldap_search($ds, "ou=people,dc=example,dc=com", "(objectClass=person)");