Source code exposure An important issue regarding inclusion is the exposure of source code. The main reason for this problem is the following common situation: l Use the .inc extension for the included file l The included file is saved in the main directory of the website l Apache has not set the type of the .inc file l Apache’s default file type is text/plain The above situation results in the included file being directly accessible through the URL. Even worse, they will be treated as normal text and not parsed by PHP, so your source code will be displayed in the user's browser (see Figure 5-1). Figure 5-1. Exposure of source code in the server It's easy to avoid this situation. You can only restructure your application and put all
1.##Introduction: Source Code Exposure An important issue regarding inclusion is the exposure of source code. The main reason for this problem is the following common situations: l Use the extension of .inc for included files l&...
2.PHP Security-Source Code Exposure (2)
Introduction: Source code exposure Your WEB server must be able to read your source code and execute it , which means that when the code written by anyone is run by the server, it can also read your source code. On a shared host, the biggest risk...
[Related Q&A recommendations]:
The above is the detailed content of How to use source code exposure? Summarize source code exposure example usage. For more information, please follow other related articles on the PHP Chinese website!