Help with PHP require_once

Asked

Viewed 61 times

-1

I have this code to change page

require_once(basename(($_GET[''page'']!='''' ? $_GET[''page''] : ''home'') . ''.php''));

I would like it to take the files from a specific page type /inc/pages...

php
  • 8

    this may be the most insecure code I’ve ever seen posted here.

  • 1

    But, what happens? Make a mistake? Doesn’t it work? Please specify your question better so that we can help you.

  • Good if it is not safe show me a safe. It works yes, but I need one to take the files from another folder. It is for the page change

  • It works, but I need it to get pages from other folders like /inc/pages/ I want the files to stay there and not in the main folder.

  • 2

    The safe solution is to have a list of which pages are valid, and check if what the user has been through is on that list. Because the way it is, someone malicious will be able to run any PHP that exists in the project (and maybe even any PHP that exists on the server).

  • @Maniero only "no" is insecure because it does not perform - syntax error

Show 1 more comment

1 answer

0

The problem is that you must be trying to access files and directories that the Web server does not see, mainly for security reasons. If the default directory to deploy files is /var/www for example, only this directory down will be visible to the server. You will never be able to load anything from /inc/pages, unless you move /inc/pages into /var/www.

Browser other questions tagged php

You are not signed in. Login or sign up in order to post.