nyx/tests/dynamic_fixtures/php_frameworks/codeigniter/benign.php
2026-06-05 10:16:30 -05:00

24 lines
566 B
PHP

<?php
// CodeIgniter-style route, benign sanitised payload.
namespace App\Controllers;
use CodeIgniter\Controller;
use CodeIgniter\Router\RouteCollection;
function nyx_register_routes(RouteCollection $routes): void
{
$routes->get('run/(:any)', 'App\\Controllers\\UserController::run');
}
class UserController extends Controller
{
public function run(string $payload): string
{
echo "__NYX_SINK_HIT__\n";
$cmd = "true " . escapeshellarg($payload);
$out = shell_exec($cmd) ?? '';
echo $out;
return $out;
}
}