Re: Re: Server includes and Absolute URL
| From: | Jochem Maas | Date: | Thu, 24 Feb 2005 15:04:48 +0000 |
| Subject: | Re: Re: Server includes and Absolute URL | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-209366@lists.php.net to get a copy of this message | ||
Jason Barnett wrote:
Jacques wrote:unless you absolutely 100% trust the server in question I would say that its madness to include/require a file from another server... e.g. you could include this wonderful little html file: http://example.com/evilhaxor.html which might contain. <?php echo file_get_contents('/etc/passwd'); exit; ?> guess what that does when you include it :-), just so you know there are pitfalls, some are quite deep!Can make use of an absolute URL when using require() or require_once()?Yes, as long as you have allow_url_fopen = 1 in your php.ini
Regards Jacques