RE: [PHP] Reading php source code?

From: Date: Tue, 28 Aug 2001 00:56:46 +0000
Subject: RE: [PHP] Reading php source code?
Groups: php.general 
Request: Send a blank email to php-general+get-64708@lists.php.net to get a copy of this message
> How hard is it for someone to somehow read the source code out of my php > files on my isp hosted website. They use linux & apache & php 4.0.6. Pretty hard, assuming your code is not output at any point. > I ask because in my logfile it seems someone accessed a uniquely named > not-guessable folder in my web root. It is mentioned in my source code. > I use imagecreatefromjpeg on files in this directory. How can someone > see my folders if not by viewing my source code? Does that folder name ever get output to the browser? Even in <IMG SRC=''>? If PHP creates the file then retrieves the image itself via HTTP, that would explain the hit... Jason -- Jason Murray jasonm@melbourneit.com.au Web Developer, Melbourne IT "Work now, freak later!"

« previous php.general (#64708) next »