well, it does not explain where the string comes from, but it explains the strange submit.
obviously image.php is designed to be an image (representation ), thus if you put it in your form's action it will be executed onsubmit (say, if you submit the form, you'll be returned an image (which is possible, but doesn't make sense)). solution: put the form handling script in the action attribute.
obviously image.php is designed to be an image (representation ), thus if you put it in your form's action it will be executed onsubmit (say, if you submit the form, you'll be returned an image (which is possible, but doesn't make sense)). solution: put the form handling script in the action attribute.
Comment