RE: [PHP] Reading php source code?
| From: | Jason Murray | Date: | Tue, 28 Aug 2001 00:56:46 +0000 |
| Subject: | RE: [PHP] Reading php source code? | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-64708@lists.php.net to get a copy of this message | ||
> How hard is it for someone to somehow read the source code out of my php
> files on my isp hosted website. They use linux & apache & php 4.0.6.
Pretty hard, assuming your code is not output at any point.
> I ask because in my logfile it seems someone accessed a uniquely named
> not-guessable folder in my web root. It is mentioned in my source code.
> I use imagecreatefromjpeg on files in this directory. How can someone
> see my folders if not by viewing my source code?
Does that folder name ever get output to the browser? Even in <IMG SRC=''>?
If PHP creates the file then retrieves the image itself via HTTP, that
would explain the hit...
Jason
--
Jason Murray
jasonm@melbourneit.com.au
Web Developer, Melbourne IT
"Work now, freak later!"