RE: [PHP] Preventing execution without inclusion
| From: | Ford, Mike | Date: | Fri, 14 Jan 2005 12:04:38 +0000 |
| Subject: | RE: [PHP] Preventing execution without inclusion | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-206381@lists.php.net to get a copy of this message | ||
To view the terms under which this email is distributed, please go to http://disclaimer.leedsmet.ac.uk/email.htm
> -----Original Message-----
> From: Adam Hubscher
> Sent: 13/01/05 22:25
>
> From within the application, I use one page to include
> classes/variables and so on. Is there a way (I may have been missing it
> in the documentation for PHP, however I didnt see anything related) to
> prevent a user from directly accessing/executing *.php by the file
> making sure taht it was only included by index.php?
All include files should be placed in a separate directory which is outside
the Web server's document root. This makes them completely inaccessible
from the client browser, but they are still available to scripts running on
the server.
Cheers!
Mike