Posted by Mike Ford on 01/14/05 14:04

To view the terms under which this email is distributed, please go to http://disclaimer.leedsmet.ac.uk/email.htm



> -----Original Message-----
> From: Adam Hubscher
> Sent: 13/01/05 22:25
>
> From within the application, I use one page to include
> classes/variables and so on. Is there a way (I may have been missing it
> in the documentation for PHP, however I didnt see anything related) to
> prevent a user from directly accessing/executing *.php by the file
> making sure taht it was only included by index.php?

All include files should be placed in a separate directory which is outside
the Web server's document root. This makes them completely inaccessible
from the client browser, but they are still available to scripts running on
the server.

Cheers!

Mike

[Back to original message]