#!/usr/bin/python import os import cgi import cgitb cgitb.enable(context=10) if os.environ.has_key('QUERY_STRING'): os.environ['QUERY_STRING'] = '' fields = cgi.FieldStorage() print 'Content-Type: text/html' print '' print ''' 4

Web Application Challenge 4

Through some manipulation or interpretation of this CGI script and the HTML page(s) that it generates, a 10 character key can be found.

Find the key!

''' PRODUCT_NAME = "Unidentifiable garbage" def purchase_success(quantity): print '''

Congratulations, your order for %d "%s" has been placed.

''' % (quantity, PRODUCT_NAME) # key = 765JBo4B54 if fields.has_key('quantity') and fields.has_key('product') and fields['product'].value == PRODUCT_NAME: product = fields['product'].value quantity = int(fields['quantity'].value) purchase_success(quantity) else: print '''

SALE: %s

Use the order form below to place an order.

How many would you like?

''' % (PRODUCT_NAME, PRODUCT_NAME) print '''
'''