RE: [PHP] Protecting files
| From: | Bryan Lipscy | Date: | Tue, 18 Feb 2003 05:42:15 +0000 |
| Subject: | RE: [PHP] Protecting files | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-135957@lists.php.net to get a copy of this message | ||
That is called Cross-Site Scripting (XSS).
I have not been able to get access to the variables via an XSS exploit.
It appears that Apache renders the php code before sending off the
requesting include function.
I also like the .htaccess way of preventing user access to the scripts.
This is also worthy of further investigation.
Bryan