note 1267 deleted from function.include by rasmus
| From: | rasmus@php.net | Date: | Mon, 12 Aug 2002 14:09:31 +0000 |
| Subject: | note 1267 deleted from function.include by rasmus | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-34854@lists.php.net to get a copy of this message | ||
If you're using include(), you will probably want to verify the existence of the included file
with a file_exists() first, so that if by mistake the file doesn't exist, evil users won't
see your directory structures.
I use this procedure in a set of php3's that provide the authentication for my site, where you
call the php3 with a given filename, that is displayed only if the user has been authenticated
first.