|
|
| Christo 2004-10-21, 3:57 pm |
| can anyone tell me if there is a way in which anyone could possibly view the
php source code on a web page through their browser without having telnet or
FTP access to my web server?
just in case you know?
| |
| Harrie Verveer 2004-10-21, 3:57 pm |
| unless someone made a huge mistake: no.
php servers parse the PHP file you request and make HTML of it, than
send this HTML back to the client while the PHP-code stays on the
server; and I'm very happy about that :D I don't know how your php files
look like, but mine contain database passes :)
Christo wrote:
> can anyone tell me if there is a way in which anyone could possibly view the
> php source code on a web page through their browser without having telnet or
> FTP access to my web server?
>
> just in case you know?
>
>
| |
| Ninjaboy 2004-10-21, 3:57 pm |
| If you talking about letting other people view php source through the web.
You can try saving those files as name.phps and pull it up through your
browser.
"Harrie Verveer" <newsgroup{remove-this}@harrieverveer.com> wrote in message
news:Vbydnbas3tC1JOrcRVnygA@zeelandnet.nl...[color=darkred]
> unless someone made a huge mistake: no.
>
> php servers parse the PHP file you request and make HTML of it, than send
> this HTML back to the client while the PHP-code stays on the server; and
> I'm very happy about that :D I don't know how your php files look like,
> but mine contain database passes :)
>
> Christo wrote:
| |
| Richard Grove - Žed Eye Media 2004-10-21, 3:57 pm |
| "Christo" <chris@juststuff.co.uk> wrote in message
news:2tpqh1F22edk7U1@uni-berlin.de...
> can anyone tell me if there is a way in which anyone could possibly view
the
> php source code on a web page through their browser without having telnet
or
> FTP access to my web server?
>
> just in case you know?
>
>
If the PHP interpretor stopped working
Regards
Richard Grove
http://www.shopmaker.co.uk - Ecommerce Shop Systems
| |
| Michael Vilain 2004-10-21, 3:57 pm |
| In article <2tpqh1F22edk7U1@uni-berlin.de>,
"Christo" <chris@juststuff.co.uk> wrote:
> can anyone tell me if there is a way in which anyone could possibly view the
> php source code on a web page through their browser without having telnet or
> FTP access to my web server?
>
> just in case you know?
Chris talks about this in his article
http://shiflett.org/articles/security-corner-mar2004
--
DeeDee, don't press that button! DeeDee! NO! Dee...
| |
| Colin McKinnon 2004-10-22, 8:55 am |
| Ninjaboy wrote:
> If you talking about letting other people view php source through the web.
> You can try saving those files as name.phps and pull it up through your
> browser.
>
If not....write your own (secured) wrapper around the highlight_file()
function.
HTH
C.
|
|
|
|