Hide Include-Files from the Web
| From: | mailing_list at gmx dot at | Date: | Sat, 03 Mar 2001 12:14:21 +0000 |
| Subject: | Hide Include-Files from the Web | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-42433@lists.php.net to get a copy of this message | ||
Hi!
I want my include-files not be seen from outside AND not be executed!!!
I don't have access to a directory outside DOCUMENT_ROOT and I don't have
.htaccess!!!
I think about something like:
1.
name: <file>.inc.php
2.
add code:
if ($PHP_SELF==MY_NAME) exit;
as first line in the inluded script.
so, if the script is being included from another script, the code will be
executed - but if the file will be called directly, no code is executed!
BUT - how do I get the include-file's name?
or is it safe enough, to use something like
if (substr($SCRIPT_URL,-8)==".inc.php") exit;
thanks
michi
--
Sent through GMX FreeMail - http://www.gmx.net