> directly. My main question is if all of the code inside an included PHP
file
> is put inside one or more functions this should prevent anyone from
running
> any of that code by directly calling that PHP file correct? There is no
way
> for them to invoke a function just from a URL assuming I have no code at
all
> outside the functions.
Just a small tip : to be *sure* that no one runs directly my included files,
they begin with

if (basename($_ENV["SCRIPT_NAME"]) != 'index.php') {
 // redirection
}

So, even if the code is not in a function or class, I'm safe.
Am I wrong or do you think it could be ok?
Regards,
Philippe



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to