php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #37856 Disallow direct parsing of .inc.php includes
Submitted: 2006-06-20 03:40 UTC Modified: 2006-06-20 05:59 UTC
From: toomuchphp-phpbugs at yahoo dot com Assigned:
Status: Wont fix Package: Feature/Change Request
PHP Version: 5.1.4 OS:
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If this is not your bug, you can add a comment by following this link.
If this is your bug, but you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: toomuchphp-phpbugs at yahoo dot com
New email:
PHP Version: OS:

 

 [2006-06-20 03:40 UTC] toomuchphp-phpbugs at yahoo dot com 
Description:
------------
Would it be a good idea to provide an option in php.ini to prevent PHP from executing scripts which are designed to be included files?  E.g., if PHP detects that the requested document is 'includes/someFile.inc.php' it will refuse to process the document because it has a '.inc.php' extension and is clearly only meant for inclusion.

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2006-06-20 05:59 UTC] derick@php.net 
No, we can't change this as this is assumption that might only be true for *your* applications. In this case it would for example break one of mine... Also, disallowing this would be up to apache and not PHP anyway.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Sun May 19 10:01:32 2024 UTC