Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.php > #18183
| From | rcpj@panix.com (Pierre Jelenc) |
|---|---|
| Newsgroups | comp.lang.php |
| Subject | Re: How to link from html form an external php file login? |
| Date | 2020-01-12 00:26 +0000 |
| Organization | Public Access Networks Corp. |
| Message-ID | <qvdp3u$7dv$1@reader2.panix.com> (permalink) |
| References | <quqbnf$kj9$1@gioia.aioe.org> <qvcqip$6bl$1@jstuckle.eternal-september.org> <qvdhsi$ed4$1@reader2.panix.com> <qvdkrp$eq7$1@jstuckle.eternal-september.org> |
In article <qvdkrp$eq7$1@jstuckle.eternal-september.org>,
Jerry Stuckle <jstucklex@attglobal.net> wrote:
>On 1/11/2020 5:23 PM, Pierre Jelenc wrote:
>> In article <qvcqip$6bl$1@jstuckle.eternal-september.org>,
>> Jerry Stuckle <jstucklex@attglobal.net> wrote:
>>>
>>> The hosting company (not you) *can* configure the host to parse .html
>>> files as php code - but if I saw a hosting company do that I would run
>>> as fast as I could. It is a security risk
>>
>> Why is that?
>>
>>> as well as a performance
>>> problem because every page will be parsed for php code, whether it
>>> should be or not.
>>
>> Except if every page has PHP scripts anyway...
>>
>> Pierre
>>
>
>Then each page should have a .php extension. Parsing .html files as php
>code is still a huge security exposure.
But why? I understand that poorly-written PHP is a risk, but that's
independent of the file extension.
> And any decent sized site will have pages that don't contain any php
>code.
Not all sites are large, though.
> TOC and privacy statement pages come to mind for a start. So do
>About Us and other common pages.
Unless they all contain common elements, that are conveniently inserted
via include, require, auto-prepend, auto-append, and the like. Sure, it's
wasting a few cpu cycles and file overheads, but that's not much a problem
with modern hardware, while it makes maintenance far easier when there's
only one file to edit instead of 20. Any site with a menu will benefit
from needing to edit a single included file.
Of course there's SSI, but that does not allow tweaking the include on the
fly, such as highlighting the name the page currently loaded and disabling
its link in the menu.
Pierre
--
Pierre Jelenc
The Gigometer www.gigometer.com
The NYC Beer Guide www.nycbeer.org
Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
How to link from html form an external php file login? ^Bart <gabriele1NOSPAM@hotmail.com> - 2020-01-04 16:41 +0100
Re: How to link from html form an external php file login? Jerry Stuckle <jstucklex@attglobal.net> - 2020-01-04 12:02 -0500
Re: How to link from html form an external php file login? ^Bart <gabriele1NOSPAM@hotmail.com> - 2020-01-11 13:14 +0100
Re: How to link from html form an external php file login? Tim Streater <timstreater@greenbee.net> - 2020-01-11 12:48 +0000
Re: How to link from html form an external php file login? Jerry Stuckle <jstucklex@attglobal.net> - 2020-01-11 10:45 -0500
Re: How to link from html form an external php file login? rcpj@panix.com (Pierre Jelenc) - 2020-01-11 22:23 +0000
Re: How to link from html form an external php file login? Jerry Stuckle <jstucklex@attglobal.net> - 2020-01-11 18:14 -0500
Re: How to link from html form an external php file login? rcpj@panix.com (Pierre Jelenc) - 2020-01-12 00:26 +0000
Re: How to link from html form an external php file login? Jerry Stuckle <jstucklex@attglobal.net> - 2020-01-11 23:10 -0500
Re: How to link from html form an external php file login? rcpj@panix.com (Pierre Jelenc) - 2020-01-12 21:21 +0000
Re: How to link from html form an external php file login? Jerry Stuckle <jstucklex@attglobal.net> - 2020-01-12 22:07 -0500
Re: How to link from html form an external php file login? rcpj@panix.com (Pierre Jelenc) - 2020-01-14 22:07 +0000
Re: How to link from html form an external php file login? Jerry Stuckle <jstucklex@attglobal.net> - 2020-01-15 10:40 -0500
Re: How to link from html form an external php file login? Arno Welzel <usenet@arnowelzel.de> - 2020-01-15 20:20 +0100
Re: How to link from html form an external php file login? Jerry Stuckle <jstucklex@attglobal.net> - 2020-01-11 23:13 -0500
Re: How to link from html form an external php file login? Lew Pitcher <lew.pitcher@digitalfreehold.ca> - 2020-01-11 11:52 -0500
Re: How to link from html form an external php file login? Lew Pitcher <lew.pitcher@digitalfreehold.ca> - 2020-01-11 11:54 -0500
Re: How to link from html form an external php file login? ^Bart <gabriele1NOSPAM@hotmail.com> - 2020-01-12 00:45 +0100
Re: How to link from html form an external php file login? Jerry Stuckle <jstucklex@attglobal.net> - 2020-01-11 23:16 -0500
Re: How to link from html form an external php file login? "J.O. Aho" <user@example.net> - 2020-01-04 18:02 +0100
Re: How to link from html form an external php file login? Ben Bacarisse <ben.usenet@bsb.me.uk> - 2020-01-04 17:03 +0000
Re: How to link from html form an external php file login? Lew Pitcher <lew.pitcher@digitalfreehold.ca> - 2020-01-11 11:04 -0500
Re: How to link from html form an external php file login? Arno Welzel <usenet@arnowelzel.de> - 2020-01-11 18:52 +0100
Re: How to link from html form an external php file login? kristjanman2k20@gmail.com - 2020-01-26 20:17 -0800
csiph-web