Re: inclusion safety

But how do I check for the valid functions? Jeroen Jochems Webfreak Internet Services Chief Executive Officer jeroen@webfreak.nl www.webfreak.nl ----- Original Message ----- From: "Chris Moyer" <cdmoyer@chekinc.om.worldstats.net> To: "Webfreak.nl helpdesk" <helpdesk@isfunky.com> Sent: Monday, May 29, 2000 8:21 PM Subject: Re: [PHP-GENERAL] inclusion safety > On Mon, May 29, 2000 at 09:07:28PM +0200, Webfreak.nl helpdesk wrote: > > No, this is a part of the file i expect the users to upload: > > ------------------- > > colom(1,o); > > vak(11,name,o); > > l("www.linux.org","linux","11","t"); > > l("www.linux.org","linux","11","t"); > > l("www.linux.org","linux","11","t"); > > vak(11,name,s); > > -------------- > > > > The functions are declared in de index.php file that includes the > > content.inc... > > Someone else mentioned something similar to this: > Have the user create the file using your scripts, and various form. > 1. The first form allows you to pick what function to put in next. > 2. Then the form for that function promts the user for the appropriate > arguemnts > 3. Then you check the input for appropriatness. > Check that each argument is the right type, maybe do strip_tags() > and addslashes to it? > 4. Add that to the file, and return to step one until the user > has created their whole file. > > This way, it easy to control what is in that file, and also easier to > check for abuse. > > > Jeroen Jochems > > -- Chris Moyer -- cmoyer@chekinc.com -- > PHP Developer -- Chek.com >