php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Doc Bug #34406 Example gives wrong impression of "include" behaviour
Submitted: 2005-09-07 12:54 UTC Modified: 2005-09-07 13:32 UTC
From: info at bastian-frank dot de Assigned:
Status: Closed Package: Documentation problem
PHP Version: Irrelevant OS: All
Private report: No CVE-ID: None
View Developer Edit
 [2005-09-07 12:54 UTC] info at bastian-frank dot de 
Description:
------------
In the documentation for "include" the example "include() through HTTP" gives the wrong impression that including an file with URL wrappers is a legal alternative to a normal include with local files.

This is wrong because an include with URL wrappers parses the file twice: By the server when executing the "included" HTTP-request and once again AFTER including it in the current script.

This is not stated clearly and is confusing for people learning PHP.

The user contributed notes show that there IS confusion and even very insecure tips ("change the file ending") are given in the notes.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2005-09-07 13:32 UTC] vrana@php.net 
This bug has been fixed in the documentation's XML sources. Since the
online and downloadable versions of the documentation need some time
to get updated, we would like to ask you to be a bit patient.

Thank you for the report, and for helping us make our documentation better.

"Security warning: Remote file may be processed at the remote server (depending on the file extension and the fact if the remote server runs PHP or not) but it still has to produce a valid PHP script because it will be processed at the local server. If the file from the remote server should be processed there and outputted only, readfile() is much better function to use. Otherwise, special care should be taken to secure the remote script to produce a valid and desired code."

+ some notes deleted (will be visible on the mirrors after some time)
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Wed Nov 19 08:00:01 2025 UTC