include()
| From: | Lord Loh. | Date: | Thu, 01 Aug 2002 07:28:02 +0000 |
| Subject: | include() | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-110625@lists.php.net to get a copy of this message | ||
I suppose include() can be used to include files from remote systems(not on
WINDOWS).
So, How can I protect my script from unauthorised inclusions ?
A webmaster on the same server can always use a path like
"/home/htdocs/.../config.php" and include my config .php which contains my
database password !!
Even a web master from a remote server can do the same by probably using
http://www.xyz.net/config.php
I am using windows 2000/apache/php so I really have not tried these...but
the docs say it can be done(remote system inclusion except on win)
Lord Loh.