hey!

i think ive hit a 50ft high electrified razor wire fence here, but it might be possible...

there is a write function... write('bla bla bla').. and i want to send a:

'): <script></script> write('

so that it will stop writin it, and run whatevers in the script part... It is sent using an url, to a cgi function, and when i try sending it, it changes %27 into &#39 in the source so it ends up like this:

write('bla bla bla&#39): <script></script> write('&#39 bla bla

how can i send a ' which will appear in the source??

thanx