Re: [PHP] Deny processing of non included files

2007-02-15 Thread Richard Lynch
On Thu, February 15, 2007 10:11 am, Jon Anderson wrote: > Easy answer: deny access to them. Use your web server to prevent > execution of the files. Generally, if you're using Apache, you can > just > do this: > > > Order Allow,Deny > Deny From All > > > You may also be able to do that fr

Re: [PHP] Deny processing of non included files

2007-02-15 Thread Richard Lynch
On Thu, February 15, 2007 9:44 am, Tim wrote: > typing http://sitename/modules/thismodule/admin/index.php, this file > will > only be processed by the browser if and only if it has been included > by > http://sitename/admin/index.php One simple way to be sure it's not access directly by the browse

RE: [PHP] Deny processing of non included files

2007-02-15 Thread Tim
t; Cc : 'php-general' > Objet : Re: [PHP] Deny processing of non included files > > Easy answer: deny access to them. Use your web server to > prevent execution of the files. Generally, if you're using > Apache, you can just do this: > > > Order Allow,De

Re: [PHP] Deny processing of non included files

2007-02-15 Thread tedd
At 4:44 PM +0100 2/15/07, Tim wrote: OK here is the background: My app will: have an admin access at http://sitename/admin/ Obviously authenticated users only are allowed access.. Now my issues is this, i do all the processing from a single index.php in admin/ folder that includes files from al

RE: [PHP] Deny processing of non included files

2007-02-15 Thread Tim
> -Message d'origine- > De : Jon Anderson [mailto:[EMAIL PROTECTED] > Envoyé : jeudi 15 février 2007 17:11 > À : Tim > Cc : 'php-general' > Objet : Re: [PHP] Deny processing of non included files > > Easy answer: deny access to them. Use your we

Re: [PHP] Deny processing of non included files

2007-02-15 Thread Jon Anderson
Easy answer: deny access to them. Use your web server to prevent execution of the files. Generally, if you're using Apache, you can just do this: Order Allow,Deny Deny From All You may also be able to do that from a .htaccess file. If you can't configure the server, just use a define

[PHP] Deny processing of non included files

2007-02-15 Thread Tim
OK here is the background: My app will: have an admin access at http://sitename/admin/ Obviously authenticated users only are allowed access.. Now my issues is this, i do all the processing from a single index.php in admin/ folder that includes files from all over the webapp directory structure f