vrana Wed Sep 7 07:31:49 2005 EDT
Modified files:
/phpdoc/en/language control-structures.xml
Log:
Warning about including remote files (bug #34406)
http://cvs.php.net/diff.php/phpdoc/en/language/control-structures.xml?r1=1.124&r2=1.125&ty=u
Index: phpdoc/en/language/control-structures.xml
diff -u phpdoc/en/language/control-structures.xml:1.124
phpdoc/en/language/control-structures.xml:1.125
--- phpdoc/en/language/control-structures.xml:1.124 Tue Aug 9 14:34:43 2005
+++ phpdoc/en/language/control-structures.xml Wed Sep 7 07:31:45 2005
@@ -1,5 +1,5 @@
<?xml version="1.0" encoding="iso-8859-1"?>
-<!-- $Revision: 1.124 $ -->
+<!-- $Revision: 1.125 $ -->
<chapter id="language.control-structures">
<title>Control Structures</title>
@@ -1434,6 +1434,20 @@
]]>
</programlisting>
</example>
+ </para>
+ <warning>
+ <title>Security warning</title>
+ <para>
+ Remote file may be processed at the remote server (depending on the file
+ extension and the fact if the remote server runs PHP or not) but it still
+ has to produce a valid PHP script because it will be processed at the
+ local server. If the file from the remote server should be processed
+ there and outputted only, <function>readfile</function> is much better
+ function to use. Otherwise, special care should be taken to secure the
+ remote script to produce a valid and desired code.
+ </para>
+ </warning>
+ <para>
See also <link linkend="features.remote-files">Remote files</link>,
<function>fopen</function> and <function>file</function> for related
information.
