Server Setting or PHP Script

Conrad11 · 31 May 2007 at 13:47

Hi there,

I am looking to see if there is a specific CHMOD or PHP setting so that a php page can't be opened (run) unless its included by another PHP page on the server.

Thanks.

EDIT:

Or would a token be sufficient?

Conrad11 · 31 May 2007 at 14:05

Jaffa_Cake said:
When i do this I use a constant.

File:

Code:

define("SECURE", TRUE);

Protected File:

Code:

if (!defined("SECURE")) { die ("You cannot directly access this file"); }

Surely doing this means I wouldn't be able to run it even if it was included?

Conrad11 · 31 May 2007 at 14:07

marc2003 said:
have your includes directory outside of the document root then it can never be run.

I have never really understood what the "root" is. Would it be outside the "public_html" folder.

Conrad11 · 31 May 2007 at 14:45

Jaffa_Cake said:
You declare the constant in your index file then when it includes the other file then the constant is defined in your scripts. Which means that if you put that If statement on your first line then the file can't be executed past that line unless the constant is defined from your index.

Ah I see now....clever.

And I take it that there is no way to get past this?