note 101670 deleted from function.require by salathe
| From: | salathe@php.net | Date: | Mon, 14 Feb 2011 09:54:23 +0000 |
| Subject: | note 101670 deleted from function.require by salathe | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-176974@lists.php.net to get a copy of this message | ||
Note Submitter: holdoffhunger at gmail dot com
----
Require is a really neat function, compared to include. You can use it for security purposes. For
example, consider that you have a database that's based on simple text-files. Theoretically,
someone could type in the URL of those text-files, and view them directly in their browser. This is
as opposed to what you want: those files only to be viewable through your own PHP script.
Otherwise, the data won't be properly formatted, or much worse, you won't be able to do a
proper secure authorization or authentication. So, here's the trick. Rename your .txt files
to .php files. The first line should be this...
require('this_file_does_not_exist_and_will_never_exist');
Then, after that first line, the rest of the file is your database information. If someone tries
access the file directly, they'll get an error, and see no information (danged hackers!). But,
your PHP script that displays the database file will know that this line is there. This is assuming
that you reprogram your text-database, php-front-end to ignore the first line of files when reading
data.
It's not encryption, but it's powerful security, quick and cheap, for custom-built
databases.