editing httpd.conf??

[Hype.it]

ah... then to protect one's own applications or projects what lines do i need to invoke to activate this feature?

[michaelsanford]

It's not a feature, per se, it's just the way PHP works.

Here's a short example I wipped up for you:
http://trogdor.myvnc.com:81/~amras/config_example/

Let's say you have a file called config.php containing something like:

<?php

// This is an example configuration file in PHP
// by Michael Sanford for www.macosx.com

	$config['username'] = 'michael';
	$config['password'] = 'michael1';
	$config['host'] = 'michaelsanford.com';

?>

And you called that configuration file with:

<?php

// This is an example configuration file in PHP
// by Michael Sanford for www.macosx.com

// call the configuration script
include("./config_example.php");

	echo "Username: " . $config['username'] . "<br />";
	echo "Password: " . $config['password'] . "<br />";
	echo "Host: " . $config['host'] . "<br />";

?>

Hit config_example_local.php and see what happens. You get the output. Now hit config_example.php, you get a blank page.

Now that you even know the URL of my configuration script ( http://trogdor.myvnc.com:81/~amras/c...ig_example.php ) try and hack it so you can print the $config variable elements...you'll have a pretty hard time doing it.

PS The thing to keep in mind here is that PHP means Hypertext PRE PROCESSOR, which means the code is executed before it's sent to the client. So even if you knew the URL of your configuration file and tried to curl it in the terminal, the server would just process the file, find there's no HTML output and download an empty file.

[TommyWillB]

Everthing you ever wanted to know about Apache can be found at Apache.org... Look in the HTTP 1.3 section.

Also, I've found it easier to change the ownership/permissions of the httpd.conf file so that I can edit is as my non-root administrator password... So I don't need to mess with any command line suff... I just use BBedit.


...Oh... and everything you want to know about PHP is at php.net.