php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #37856 Disallow direct parsing of .inc.php includes
Submitted: 2006-06-20 03:40 UTC Modified: 2006-06-20 05:59 UTC
From: toomuchphp-phpbugs at yahoo dot com Assigned:
Status: Wont fix Package: Feature/Change Request
PHP Version: 5.1.4 OS:
Private report: No CVE-ID: None
View Developer Edit
 [2006-06-20 03:40 UTC] toomuchphp-phpbugs at yahoo dot com 
Description:
------------
Would it be a good idea to provide an option in php.ini to prevent PHP from executing scripts which are designed to be included files?  E.g., if PHP detects that the requested document is 'includes/someFile.inc.php' it will refuse to process the document because it has a '.inc.php' extension and is clearly only meant for inclusion.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2006-06-20 05:59 UTC] derick@php.net 
No, we can't change this as this is assumption that might only be true for *your* applications. In this case it would for example break one of mine... Also, disallowing this would be up to apache and not PHP anyway.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Mon Dec 08 05:00:01 2025 UTC