RE: [PHP] Preventing execution without inclusion

From: Date: Fri, 14 Jan 2005 12:04:38 +0000
Subject: RE: [PHP] Preventing execution without inclusion
Groups: php.general 
Request: Send a blank email to php-general+get-206381@lists.php.net to get a copy of this message
To view the terms under which this email is distributed, please go to http://disclaimer.leedsmet.ac.uk/email.htm > -----Original Message----- > From: Adam Hubscher > Sent: 13/01/05 22:25 > > From within the application, I use one page to include > classes/variables and so on. Is there a way (I may have been missing it > in the documentation for PHP, however I didnt see anything related) to > prevent a user from directly accessing/executing *.php by the file > making sure taht it was only included by index.php? All include files should be placed in a separate directory which is outside the Web server's document root. This makes them completely inaccessible from the client browser, but they are still available to scripts running on the server. Cheers! Mike

« previous php.general (#206381) next »