note 92686 added to function.highlight-string

From: Date: Tue, 04 Aug 2009 08:24:31 +0000
Subject: note 92686 added to function.highlight-string
Groups: php.notes 
Request: Send a blank email to php-notes+get-159073@lists.php.net to get a copy of this message
Is there a way to BLOCK someone from using highlight_string being used on your pages? What I mean is this: (Code) <?php $a = min(eight, four); echo "::::" . $a . "::::"; // Get a file into an array $lines = file('ur site URL'); // Loop through our array, show HTML source as HTML source; and line numbers too. echo('<table border=0 cellpadding=0 cellspacing=0>'); foreach ($lines as $line_num => $line) { echo('<tr>'); echo('<td bgcolor = "#cccccc">'); echo('<code>' . ($line_num + 1) . '</code>'); echo('</td>'); echo('<td>'); highlight_string($line); echo('</td>'); echo('</tr>'); } ?> Will Pull the following: All the code for the particular page. This can cause a huge security flaw. I just want to be able to block this from being used on my site. If you can help PLEASE do. ---- Server IP: 69.147.83.197 Probable Submitter: 74.183.1.189 ---- Manual Page -- http://www.php.net/manual/en/function.highlight-string.php Edit -- https://master.php.net/note/edit/92686 Del: integrated -- https://master.php.net/note/delete/92686/integrated Del: useless -- https://master.php.net/note/delete/92686/useless Del: bad code -- https://master.php.net/note/delete/92686/bad+code Del: spam -- https://master.php.net/note/delete/92686/spam Del: non-english -- https://master.php.net/note/delete/92686/non-english Del: in docs -- https://master.php.net/note/delete/92686/in+docs Del: other reasons-- https://master.php.net/note/delete/92686 Reject -- https://master.php.net/note/reject/92686 Search -- https://master.php.net/manage/user-notes.php

« previous php.notes (#159073) next »