php view source

can anyone tell me if there is a way in which anyone could possibly view the
php source code on a web page through their browser without having telnet or
FTP access to my web server?

just in case you know?

unless someone made a huge mistake: no.

php servers parse the PHP file you request and make HTML of it, than
send this HTML back to the client while the PHP-code stays on the
server; and I'm very happy about that :D I don't know how your php files
look like, but mine contain database passes :)

Christo wrote:
> can anyone tell me if there is a way in which anyone could possibly view t
he
> php source code on a web page through their browser without having telnet 
or
> FTP access to my web server?
>
> just in case you know?
>
>

If you talking about letting other people view php source through the web.
You can try saving those files as name.phps and pull it up through your
browser.

"Harrie Verveer" <newsgroup{remove-this}@harrieverveer.com> wrote in message
news:Vbydnbas3tC1JOrcRVnygA@zeelandnet.nl...
> unless someone made a huge mistake: no.
>
> php servers parse the PHP file you request and make HTML of it, than send
> this HTML back to the client while the PHP-code stays on the server; and
> I'm very happy about that :D I don't know how your php files look like,
> but mine contain database passes :)
>
> Christo wrote: 

"Christo" <chris@juststuff.co.uk> wrote in message
news:2tpqh1F22edk7U1@uni-berlin.de...
> can anyone tell me if there is a way in which anyone could possibly view
the
> php source code on a web page through their browser without having telnet
or
> FTP access to my web server?
>
> just in case you know?
>
>

If the PHP interpretor stopped working

Regards
Richard Grove
http://www.shopmaker.co.uk - Ecommerce Shop Systems

In article <2tpqh1F22edk7U1@uni-berlin.de>,
"Christo" <chris@juststuff.co.uk> wrote:

> can anyone tell me if there is a way in which anyone could possibly view t
he
> php source code on a web page through their browser without having telnet 
or
> FTP access to my web server?
>
> just in case you know?

Chris talks about this in his article

http://shiflett.org/articles/security-corner-mar2004

--
DeeDee, don't press that button!  DeeDee!  NO!  Dee...

Ninjaboy wrote:

> If you talking about letting other people view php source through the web.
> You can try saving those files as name.phps and pull it up through your
> browser.
>

If not....write your own (secured) wrapper around the highlight_file()
function.

HTH

C.