note 111921 deleted from security by aharvey
| From: | aharvey@php.net | Date: | Thu, 11 Apr 2013 12:48:02 +0000 |
| Subject: | note 111921 deleted from security by aharvey | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-194457@lists.php.net to get a copy of this message | ||
Note Submitter: yan dot uniko dot 102 at gmail dot com
----
Check if file is included for prevent escape information:
<?php if($_SERVER['SCRIPT_FILENAME'] == __file__) exit;
/*Some Code */
?>
Check include file from GET Request:
<?php
if(isset($_GET['inc']) and in_array($inc =
dirname(__file__).'/inc/'.$_GET['inc'].'.php',
glob(dirname(__file__).'/inc/*.php'))){
include($inc);
unset($inc);
}else
include(dirname(__file__).'/inc/default.php');
?>