php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #37856 Disallow direct parsing of .inc.php includes
Submitted: 2006-06-20 03:40 UTC Modified: 2006-06-20 05:59 UTC
From: toomuchphp-phpbugs at yahoo dot com Assigned:
Status: Wont fix Package: Feature/Change Request
PHP Version: 5.1.4 OS:
Private report: No CVE-ID: None
View Add Comment Developer Edit
Anyone can comment on a bug. Have a simpler test case? Does it work for you on a different platform? Let us know!
Just going to say 'Me too!'? Don't clutter the database with that please — but make sure to vote on the bug!
Your email address:
MUST BE VALID
Solve the problem:
49 + 6 = ?
Subscribe to this entry?

 
 [2006-06-20 03:40 UTC] toomuchphp-phpbugs at yahoo dot com 
Description:
------------
Would it be a good idea to provide an option in php.ini to prevent PHP from executing scripts which are designed to be included files?  E.g., if PHP detects that the requested document is 'includes/someFile.inc.php' it will refuse to process the document because it has a '.inc.php' extension and is clearly only meant for inclusion.

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2006-06-20 05:59 UTC] derick@php.net 
No, we can't change this as this is assumption that might only be true for *your* applications. In this case it would for example break one of mine... Also, disallowing this would be up to apache and not PHP anyway.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Tue May 28 03:01:32 2024 UTC