note 101670 deleted from function.require by salathe

[email protected] Mon, 14 Feb 2011 01:54:23 -0800
Newsgroups php.notes
Message-ID <[email protected]>
Note Submitter: holdoffhunger at gmail dot com 

----

Require is a really neat function, compared to include.  You can use it for security purposes.  For example, consider that you have a database that's based on simple text-files.  Theoretically, someone could type in the URL of those text-files, and view them directly in their browser.  This is as opposed to what you want: those files only to be viewable through your own PHP script.  Otherwise, the data won't be properly formatted, or much worse, you won't be able to do a proper secure authorization or authentication.  So, here's the trick.  Rename your .txt files to .php files.  The first line should be this...

require('this_file_does_not_exist_and_will_never_exist');

Then, after that first line, the rest of the file is your database information.  If someone tries access the file directly, they'll get an error, and see no information (danged hackers!).  But, your PHP script that displays the database file will know that this line is there.  This is assuming that you reprogram your text-database, php-front-end to ignore the first line of files when reading data.

It's not encryption, but it's powerful security, quick and cheap, for custom-built databases.