> directly. My main question is if all of the code inside an included PHP file > is put inside one or more functions this should prevent anyone from running > any of that code by directly calling that PHP file correct? There is no way > for them to invoke a function just from a URL assuming I have no code at all > outside the functions. Just a small tip : to be *sure* that no one runs directly my included files, they begin with
if (basename($_ENV["SCRIPT_NAME"]) != 'index.php') { // redirection } So, even if the code is not in a function or class, I'm safe. Am I wrong or do you think it could be ok? Regards, Philippe -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php