TalkPHP - View Single Post - PHP Injection

Orc · 07-02-2008, 09:14 AM

How do I fix any file inclusion?

An example of a file inclusion would be like so:

PHP Code:


			


@include($_GET['file']);

Since the '@' makes it where it won't return any errors so it's like a spy, umm, how do I prevent it where people can remote/local file include it and screw my sites up?

07-02-2008, 09:14 AM	#1 (permalink)
Orc The Prestige Join Date: Dec 2007 Posts: 1,044 Thanks: 193	PHP Injection - Remote/Local File Inclusion. How do I fix any file inclusion? An example of a file inclusion would be like so: PHP Code: `@include($_GET['file']);` Since the '@' makes it where it won't return any errors so it's like a spy, umm, how do I prevent it where people can remote/local file include it and screw my sites up? __________________ VillageIdiot can have my babbies ;d