|
Posted by Jochem Maas on 02/24/05 17:04
Jason Barnett wrote:
> Jacques wrote:
>
>>Can make use of an absolute URL when using require() or require_once()?
>>
>
>
> Yes, as long as you have allow_url_fopen = 1 in your php.ini
unless you absolutely 100% trust the server in question I would say that
its madness to include/require a file from another server...
e.g. you could include this wonderful little html file:
http://example.com/evilhaxor.html
which might contain.
<?php
echo file_get_contents('/etc/passwd');
exit;
?>
guess what that does when you include it :-),
just so you know there are pitfalls, some are quite deep!
>
>
>>Regards
>>
>>Jacques
>
>
>
Navigation:
[Reply to this message]
|