Re: security

From: Date: Mon, 21 May 2001 18:10:40 +0000
Subject: Re: security
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-53763@lists.php.net to get a copy of this message
I realize this is old, but I was just reading through it and noticed there were not many suggestions. My idea would be to have a directory which is in a non-publically viewable place that you can refer to in an include, like include "/home/nobodyseesthisfolder/secret file" It should bomb when it can't find the file. Now that's not the only thing you can do, because anybody with total server access to their own box can put that file in place, and possibly work around the issue. So I suggest putting some of your core functions in a file in the same folder, that way the program really can't run without that file. Good Luck Randy Johnson wrote: > In PHP how do I make it so a script cannot be called from somewhere else > other than from my server. > > Example > > http://domain.com/mail.php is my mail script that is called > by > http://domain.com/signup.html > > How do I make it so > > http://somebodyelsesdomain.com/signup.html cannot call the > mail.php script. > > thanks > > Randy > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net -- ___________________________________________________________ Jack Sasportas Innovative Internet Solutions Phone 305.665.2500 Fax 305.665.2551 www.innovativeinternet.com www.web56.net

« previous php.general (#53763) next »