Re: Problems with includes

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, May 16, 2008 at 3:41 PM, Jim Lucas <lists@xxxxxxxxx> wrote:

> Tyson Vanover wrote:
>
>> Jim Lucas wrote:
>>
>>  Their are two ways that come to mind.
>>>
>>> 1. Like Dan suggested, use the full path.
>>>
>>> 2. (I prefer this way), change your include_path setting either in your
>>> php.ini file, virtual host, .htaccess or in your script to include the base
>>> path for your web site "/srv/www/html/" and then you can call them by simply
>>> removing the leading slash from your existing calls.
>>>    require 'Tools/tool1/tool1.php';
>>>    require 'Tools/tool2/tool2.php';
>>>
>>>
>> So in say, php.ini, I set the include path to something like:
>>
>> include_path = ".:/php/includes:/srv/www/html"
>>
>> Will pointing it at "/srv/www/html" open up any security holes?
>>
>>
> None that I am aware of.  Doing it in the php.ini file will make it
> available to any host that you have that uses php.  Just be aware of that
> fact.
>
> --
> Jim Lucas
>
>   "Some men are born to greatness, some achieve greatness,
>       and some have greatness thrust upon them."
>
> Twelfth Night, Act II, Scene V
>    by William Shakespeare
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
I agree, I wouldn't see how their would be any logically.  Technically, your
docroot is already accessible.  Its how you secure it that matters.

-- 
-Dan Joseph

www.canishosting.com - Plans start @ $1.99/month. Reseller plans and
Dedicated servers available.

"Build a man a fire, and he will be warm for the rest of the day.
Light a man on fire, and will be warm for the rest of his life."

[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux