Re: Re: Server includes and Absolute URL

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Jason Barnett wrote:
Jacques wrote:

Can make use of an absolute URL when using require() or require_once()?



Yes, as long as you have allow_url_fopen = 1 in your php.ini

unless you absolutely 100% trust the server in question I would say that its madness to include/require a file from another server...

e.g. you could include this wonderful little html file:
http://example.com/evilhaxor.html

which might contain.

<?php

echo file_get_contents('/etc/passwd');
exit;

?>

guess what that does when you include it :-),
just so you know there are pitfalls, some are quite deep!



Regards

Jacques




-- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux