Wrox Home  
Search P2P Archive for: Go

  Return to Index  

pro_php thread: is include() secure?


Message #1 by "Bernhard Doebler" <programmer@b...> on Mon, 12 Feb 2001 09:58:52
> Hi,
> 
> with include() it's possible to include PHP-files even from other 
> servers. Is it secure, since passwords are used in some PHP-files an 
> can therefore be stored and used unauthorized?
> 
> Regards

it _can_ be safe, if used properly

in php.ini, you can point out a directory where the include files reside, 
for example /home/yourname on linux, or c:\includes\ on NT

these files do not need to be readable by everyone, so can be secure from 
web-reading

Grtz
Wouter Rusman

  Return to Index