Hello,

On Tue, 9 Apr 2002, Rasmus Lerdorf wrote:

> >   Modified files:
> >     /phpdoc/en/functions    http.xml
> >     /phpdoc/nl/functions    http.xml
> >   Log:
> >   - Add .php extension; this will be parsed always instead of the .inc extension
> 
> Parsing of include files is really not a good idea.  We should be teaching
> people to either put their include files outside of doc_root or using a
> different extension like .inc and blocking any direct access to them via
> an httpd.conf/.htaccess rule.  Parsing an include file out of context can
> lead to security problems.

I agree, I just changed the example not to show the require at all, it's 
superfluous in this example anyway.

Derick

-----------------------------------------------------------------------
                 Did I help you? Consider a gift:
      http://www.amazon.co.uk/exec/obidos/registry/SLCB276UZU8B
-----------------------------------------------------------------------
              PHP: Scripting the Web - [EMAIL PROTECTED]
                All your branches are belong to me!
            SRM: Script Running Machine - www.vl-srm.net
-----------------------------------------------------------------------

Reply via email to