PHP Tutorials: Security - File Includes

[shoibmd]

what, if we use POST instead of GET , do we still need such type validation....

Thanks In Advance

[lgadwords]

What's the best (safest) way to use includes for a file outside the root folder? I need to access a file that's in another folder. Thanks

[SpeedPainting]

Hi Alex, I was wondering, couldn't you have done it this way:

if (file_exists("pages/$page[0].p­hp")) {

include("pages/$page[0].php");

} else {

include("pages/home.php"); }

I'm just thinking that this would be a bit quicker, and easier on your server than creating an array and then searching the array? :)

Anyway, THANKS for a great tut :)

[KayferProductions]

betterphp!

[saadlulu]

have my ears gone bad, or thats not Alex ?

great tut though :)

Alex Quality

[mastermax7777]

thanks bro, this are really good tutorials...

[yakuzashi]

if($_GET['page']=='login'){

include('_page/login.php');

} else {

include('_page/home.php'); }

This will work to and it's safe to :D

[wideload123]

@yakuzashi Not very dynamic though.

[SkidMarkHavoc]

PHP ACADEMY FTW!!!!! Great tutorial. What PHP editor are you using, and can you get it for Windows? :)

[arshak0023]

@SkidMarkHavoc

Its called gedit, there is a windows version but it looks like crap on windows

[killerbng]

wouldnt just doing the include as a var and php at the end...cant do an example here utube wont let me :P but anyways thats what I do even with a file check I just would have say ?page=login and the inlclude string has the php extension...I mean what r u going to load besides php anyways so lets force .php :P

[killerbng]

I havnt watched the whole vid yet but im 5 30 in...what I do is always do like ?page=login and then in the php file its an include for ' . $page . '.php ...This would stop the whole thing ur talking about ah cause got ur example....

include "pages/../../../../../../../..­/etc/passwd.php would ERROR out correct?

[cFrAnCoEc]

Really, thanks, i love Phpacademy, thanks for all.

[pallport]

I still see the school of rock folder... haha

[wideload123]

@pallport It's the DVD that has been in the drive for about 2 months now, It will also appear in every other video I make :)

[pallport]

@wideload123 Oh I know I just think it should be your trademark lolol

[wideload123]

@pallport Perhaps a better film ;)

[lamartir88]

thanx pal

[jomirife]

Thanks

[spyridonas23]

Ubuntu-awesomess !

[killerpacdot]

No shit you don't include things from a remote source, much less user defined.

[killerbng]

@killerpacdot some ppl r too stupid to know that though LOL

[wideload123]

If I "Like" this does it make me big headed ?

[mangopearandapples]

AWESOMES!! 

[TheEpicNewb]

First view and first comment :).