php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #37856 Disallow direct parsing of .inc.php includes
Submitted: 2006-06-20 03:40 UTC Modified: 2006-06-20 05:59 UTC
From: toomuchphp-phpbugs at yahoo dot com Assigned:
Status: Wont fix Package: Feature/Change Request
PHP Version: 5.1.4 OS:
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: toomuchphp-phpbugs at yahoo dot com
New email:
PHP Version: OS:

 

 [2006-06-20 03:40 UTC] toomuchphp-phpbugs at yahoo dot com 
Description:
------------
Would it be a good idea to provide an option in php.ini to prevent PHP from executing scripts which are designed to be included files?  E.g., if PHP detects that the requested document is 'includes/someFile.inc.php' it will refuse to process the document because it has a '.inc.php' extension and is clearly only meant for inclusion.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2006-06-20 05:59 UTC] derick@php.net 
No, we can't change this as this is assumption that might only be true for *your* applications. In this case it would for example break one of mine... Also, disallowing this would be up to apache and not PHP anyway.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Thu Dec 26 23:01:28 2024 UTC