RE: Preventing execution without inclusion

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



To view the terms under which this email is distributed, please go to http://disclaimer.leedsmet.ac.uk/email.htm



> -----Original Message-----
> From: Adam Hubscher
> Sent: 13/01/05 22:25
> 
>  From within the application, I use one page to include 
> classes/variables and so on. Is there a way (I may have been missing it 
> in the documentation for PHP, however I didnt see anything related) to 
> prevent a user from directly accessing/executing *.php by the file 
> making sure taht it was only included by index.php?

All include files should be placed in a separate directory which is outside
the Web server's document root.  This makes them completely inaccessible
from the client browser, but they are still available to scripts running on
the server.

Cheers!

Mike

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux