How does source code exposure work? Summarize source code Exposure instance Usage

Source code exposure to an important issue with the inclusion is the exposure of the sources. The main cause of this problem is the following common scenario: l The extension L for the include file using. inc contains files saved in the home directory of the Web site L Apache does not set the. inc File type L The default file type for Apache is Text/plain The above situation causes the inclusion file to be accessed directly through the URL. Worse, they will be treated as plain text without being parsed by PHP, so your source code will be displayed on the user's browser (see Figure 5-1). Figure 5-1. The source code is exposed in the server to avoid this situation easily. Only reorganize your app and put all

1. PHP Security-source code exposure

Introduction: Source code exposure is an important issue with the inclusion of the sources of exposure. The main reason for this problem is the following common scenario: L use. inc extension L& for include files;.

2. PHP Security-source code exposure (ii)

Introduction: Source exposes your Web server must be able to read your source and execute it, which means that any person writes code is run by the server, it can also read your source. On a shared host, the biggest wind ...

"Related question and answer recommendation":