note 117518 deleted from dir.constants by sobak
| From: | sobak@php.net | Date: | Sat, 19 Nov 2016 07:22:49 +0000 |
| Subject: | note 117518 deleted from dir.constants by sobak | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-207191@lists.php.net to get a copy of this message | ||
Note Submitter: Harrison
----
DIRECTORY_SEPARATOR is a lifesaver! A hacker must never know what php files you have included into
your php webpages or your php scripts that javascript calls upon. If you were to use '/'
to include a file, the hacker can instantly know that the file you included is there, however, if
you use DIRECTORY_SEPARATOR then the hacker would not know the file has been included.