php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #37856 Disallow direct parsing of .inc.php includes
Submitted: 2006-06-20 03:40 UTC Modified: 2006-06-20 05:59 UTC
From: toomuchphp-phpbugs at yahoo dot com Assigned:
Status: Wont fix Package: Feature/Change Request
PHP Version: 5.1.4 OS:
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
You can add a comment by following this link or if you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: toomuchphp-phpbugs at yahoo dot com
New email:
PHP Version: OS:

 

 [2006-06-20 03:40 UTC] toomuchphp-phpbugs at yahoo dot com 
Description:
------------
Would it be a good idea to provide an option in php.ini to prevent PHP from executing scripts which are designed to be included files?  E.g., if PHP detects that the requested document is 'includes/someFile.inc.php' it will refuse to process the document because it has a '.inc.php' extension and is clearly only meant for inclusion.

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2006-06-20 05:59 UTC] derick@php.net 
No, we can't change this as this is assumption that might only be true for *your* applications. In this case it would for example break one of mine... Also, disallowing this would be up to apache and not PHP anyway.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Mon May 06 19:01:32 2024 UTC