How Can I Prevent Direct Access to My PHP Include Files?

Prevent Direct Access to a PHP Include File

Direct access to include files, such as PHP scripts intended solely for inclusion in other pages, can pose security vulnerabilities. To address this concern, it's essential to implement mechanisms that prevent direct execution of these files.

One effective approach involves using constants to distinguish between direct access and legitimate inclusion. Add the following code to the include file:

if (!defined('MyConst')) {
    die('Direct access not permitted');
}

Then, in the pages that legitimately include the file, define the constant:

define('MyConst', TRUE);

By defining the constant before including the file, you effectively restrict its execution to instances where it's being included by one of your own pages. Attempting to access the include file directly through its URL will result in an error message.

The above is the detailed content of How Can I Prevent Direct Access to My PHP Include Files?. For more information, please follow other related articles on the PHP Chinese website!