note 92686 added to function.highlight-string
| From: | LOTRColumbia at Yahoo dot com | Date: | Tue, 04 Aug 2009 08:24:31 +0000 |
| Subject: | note 92686 added to function.highlight-string | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-159073@lists.php.net to get a copy of this message | ||
Is there a way to BLOCK someone from using highlight_string being used on your pages?
What I mean is this:
(Code)
<?php
$a = min(eight, four);
echo "::::" . $a . "::::";
// Get a file into an array
$lines = file('ur site URL');
// Loop through our array, show HTML source as HTML source; and line numbers too.
echo('<table border=0 cellpadding=0 cellspacing=0>');
foreach ($lines as $line_num => $line) {
echo('<tr>');
echo('<td bgcolor = "#cccccc">');
echo('<code>' . ($line_num + 1) . '</code>');
echo('</td>');
echo('<td>');
highlight_string($line);
echo('</td>');
echo('</tr>');
}
?>
Will Pull the following:
All the code for the particular page. This can cause a huge security flaw. I just want to be able
to block this from being used on my site. If you can help PLEASE do.
----
Server IP: 69.147.83.197
Probable Submitter: 74.183.1.189
----
Manual Page -- http://www.php.net/manual/en/function.highlight-string.php
Edit -- https://master.php.net/note/edit/92686
Del: integrated -- https://master.php.net/note/delete/92686/integrated
Del: useless -- https://master.php.net/note/delete/92686/useless
Del: bad code -- https://master.php.net/note/delete/92686/bad+code
Del: spam -- https://master.php.net/note/delete/92686/spam
Del: non-english -- https://master.php.net/note/delete/92686/non-english
Del: in docs -- https://master.php.net/note/delete/92686/in+docs
Del: other reasons-- https://master.php.net/note/delete/92686
Reject -- https://master.php.net/note/reject/92686
Search -- https://master.php.net/manage/user-notes.php