Implement path encryption by using include

1 Intermediate program includeinc & lt ;? Include_once & amp; 39; includeBasephp & amp; 39; $ path & amp; 39; & amp; 39; $ urlisBase :: decrypt (urlDecode ($ _ SERVER [& amp; 39; QUERY _

1. Intermediate program include. inc

2. Include_once 'include/Base. php ';
3. $ Path = '';
4. $ Url = isBase: decrypt (urlDecode ($ _ SERVER ['query _ string']);
5. Parse_str ($ url); // GET the variable passed through the url address GET
6. If (! Emptyempty ($ _ POST ['path']) {// Get the variable passed by POST
7. $ Path = $ _ POST ['path'];
8. $ Path = isBase: decrypt (urlDecode ($ path ));
9. }
10. // Parse the actual path
11. If (emptyempty ($ path )){
12. // Header ("Location: login. php ");
13. Exit;
14. }
15. If (! Preg_match ("/(^ http:/) | ([? | & | =])/", $ Path )){
16. // Jump to the path of the actual execution file
17. Chdir (dirname ($ path ));
18. Include_once basename ($ path );
19. Exit;
20. }
21. ?>

Index. php and include. inc are in the same directory

2. Include. inc;
3. ?>

2. modify the link in the program ()

1. "Index. php? ". Encrypt (" path =/test. php & test = 123 & test2 = 4321 ")

3. modify the POST form in the program

All forms are submitted to index. php, and a hidden Form is added in the middle.

4. modify the path of the front-end Html page: baseref =/test

5. the encryption and decryption functions are provided by you.

Summary:This method is cumbersome and can only hide the background script path. The frontend script path can still be seen in the source file (baseref). The address displayed in the address bar is index. php? Xxxxxxxx.