PHP Security Issues

Freakish_05 · 14 Dec 2006 at 09:10

Following on from This Thread a mate of my mate has just been slagging me off because I've left a whacking great security hole in the includes!
Sure enough, he's right.

Homepage Oh Crap

As the site is database driven, I can't make a validation table within the code of index.php as links are added/updated/removed etc.
What I *think* I need is a bit of code that only opens pages from "/" as all the pages are in the same directory as index.php

Can anyone help?

Freakish_05 · 14 Dec 2006 at 13:54

I tried the above but I can still point the "page" variable to where ever I want

Freakish_05 · 14 Dec 2006 at 15:31

You guys were right all along.

It was me uploading the file to the wrong place

lmao.

At any rate any time someone tries to alter the URL now they end up right back at the blog page

Thanks for your help. I can always count on the good people of OcUK forums

Freakish_05 · 14 Dec 2006 at 16:48

Aside from being incredibly annoying, who is going to care about the recursion?

Navbars were invented for a reason. The links work. I'm happy

Freakish_05 · 14 Dec 2006 at 17:10

Ah, I see your point.

Will try implementing that code.

Edit: Nice one Dj_jester. Recursion no longer happens when going to URL http://www.unrealized-potential.com/index.php?index.php