Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #18183

Re: How to link from html form an external php file login?

Show key headers only | View raw

In article <qvdkrp$eq7$1@jstuckle.eternal-september.org>,
Jerry Stuckle  <jstucklex@attglobal.net> wrote:
>On 1/11/2020 5:23 PM, Pierre Jelenc wrote:
>> In article <qvcqip$6bl$1@jstuckle.eternal-september.org>,
>> Jerry Stuckle  <jstucklex@attglobal.net> wrote:
>>>
>>> The hosting company (not you) *can* configure the host to parse .html
>>> files as php code - but if I saw a hosting company do that I would run
>>> as fast as I could.  It is a security risk
>> 
>> Why is that?
>> 
>>>                                           as well as a performance
>>> problem because every page will be parsed for php code, whether it
>>> should be or not.
>> 
>> Except if every page has PHP scripts anyway...
>> 
>> Pierre
>> 
>
>Then each page should have a .php extension.  Parsing .html files as php 
>code is still a huge security exposure.  

But why? I understand that poorly-written PHP is a risk, but that's 
independent of the file extension.

> And any decent sized site will have pages that don't contain any php 
>code.  

Not all sites are large, though.

> TOC and privacy statement pages come to mind for a start.  So do 
>About Us and other common pages.

Unless they all contain common elements, that are conveniently inserted 
via include, require, auto-prepend, auto-append, and the like. Sure, it's 
wasting a few cpu cycles and file overheads, but that's not much a problem 
with modern hardware, while it makes maintenance far easier when there's 
only one file to edit instead of 20. Any site with a menu will benefit
from needing to edit a single included file. 

Of course there's SSI, but that does not allow tweaking the include on the 
fly, such as highlighting the name the page currently loaded and disabling 
its link in the menu.

Pierre
-- 
Pierre Jelenc	
		The Gigometer		www.gigometer.com
                The NYC Beer Guide      www.nycbeer.org

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

How to link from html form an external php file login? ^Bart <gabriele1NOSPAM@hotmail.com> - 2020-01-04 16:41 +0100
  Re: How to link from html form an external php file login? Jerry Stuckle <jstucklex@attglobal.net> - 2020-01-04 12:02 -0500
    Re: How to link from html form an external php file login? ^Bart <gabriele1NOSPAM@hotmail.com> - 2020-01-11 13:14 +0100
      Re: How to link from html form an external php file login? Tim Streater <timstreater@greenbee.net> - 2020-01-11 12:48 +0000
        Re: How to link from html form an external php file login? Jerry Stuckle <jstucklex@attglobal.net> - 2020-01-11 10:45 -0500
          Re: How to link from html form an external php file login? rcpj@panix.com (Pierre Jelenc) - 2020-01-11 22:23 +0000
            Re: How to link from html form an external php file login? Jerry Stuckle <jstucklex@attglobal.net> - 2020-01-11 18:14 -0500
              Re: How to link from html form an external php file login? rcpj@panix.com (Pierre Jelenc) - 2020-01-12 00:26 +0000
                Re: How to link from html form an external php file login? Jerry Stuckle <jstucklex@attglobal.net> - 2020-01-11 23:10 -0500
                Re: How to link from html form an external php file login? rcpj@panix.com (Pierre Jelenc) - 2020-01-12 21:21 +0000
                Re: How to link from html form an external php file login? Jerry Stuckle <jstucklex@attglobal.net> - 2020-01-12 22:07 -0500
                Re: How to link from html form an external php file login? rcpj@panix.com (Pierre Jelenc) - 2020-01-14 22:07 +0000
                Re: How to link from html form an external php file login? Jerry Stuckle <jstucklex@attglobal.net> - 2020-01-15 10:40 -0500
                Re: How to link from html form an external php file login? Arno Welzel <usenet@arnowelzel.de> - 2020-01-15 20:20 +0100
                Re: How to link from html form an external php file login? Jerry Stuckle <jstucklex@attglobal.net> - 2020-01-11 23:13 -0500
      Re: How to link from html form an external php file login? Lew Pitcher <lew.pitcher@digitalfreehold.ca> - 2020-01-11 11:52 -0500
        Re: How to link from html form an external php file login? Lew Pitcher <lew.pitcher@digitalfreehold.ca> - 2020-01-11 11:54 -0500
          Re: How to link from html form an external php file login? ^Bart <gabriele1NOSPAM@hotmail.com> - 2020-01-12 00:45 +0100
          Re: How to link from html form an external php file login? Jerry Stuckle <jstucklex@attglobal.net> - 2020-01-11 23:16 -0500
  Re: How to link from html form an external php file login? "J.O. Aho" <user@example.net> - 2020-01-04 18:02 +0100
  Re: How to link from html form an external php file login? Ben Bacarisse <ben.usenet@bsb.me.uk> - 2020-01-04 17:03 +0000
  Re: How to link from html form an external php file login? Lew Pitcher <lew.pitcher@digitalfreehold.ca> - 2020-01-11 11:04 -0500
  Re: How to link from html form an external php file login? Arno Welzel <usenet@arnowelzel.de> - 2020-01-11 18:52 +0100
  Re: How to link from html form an external php file login? kristjanman2k20@gmail.com - 2020-01-26 20:17 -0800

csiph-web