TalkPHP - View Single Post - How to detect and prevent including from anothers?

delayedinsanity · 08-20-2008, 03:30 AM

One way, and I'm sure there's better, but create a random string or hash, and;

PHP Code:


			
// in config.php
define('12618922d9beec178c306b184c1810ac', TRUE);

// in files that include config.php
if (! defined('12618922d9beec178c306b184c1810ac')) die ('AAAaaaaAAUUURRrrrrgggHHHh!');

This will only work if the only way he has access to the file is via include or require. If your host permits him to run a file_get_contents() or file() on your data, I would switch hosts, ASAP. Hell, I'd probably switch anyways if they're letting this guy run amuck.
-m

08-20-2008, 03:30 AM	#2 (permalink)
delayedinsanity is cute and cuddly Join Date: Mar 2008 Location: Vegas, Baby Posts: 963 Thanks: 31	One way, and I'm sure there's better, but create a random string or hash, and; PHP Code: `// in config.php define('12618922d9beec178c306b184c1810ac', TRUE); // in files that include config.php if (! defined('12618922d9beec178c306b184c1810ac')) die ('AAAaaaaAAUUURRrrrrgggHHHh!');` This will only work if the only way he has access to the file is via include or require. If your host permits him to run a file_get_contents() or file() on your data, I would switch hosts, ASAP. Hell, I'd probably switch anyways if they're letting this guy run amuck. -m