php - 禁止直接访问某个页面

Question

如何创建无法通过直接url打开的页面？

我的index.php , main.php和 config.php

我想创建 data.php 以从数据库表中获取一些结果。但 data.php 需要一些编码:1.确保安全(无直接访问)2.从sql数据库获取表

Answer 1

为了防止直接访问，您可以执行以下任一操作:

if(count(get_included_files()) ==1) exit("error");

或

debug_backtrace() || die ("error");

或

if (basename($_SERVER['PHP_SELF']) == basename(__FILE__)) die('Error');

The best way to prevent direct access to files is to place them outside of the web-server document root (usually, one level above). You can still include them, but there is no possibility of someone accessing them through an http request.

另一种方式，拒绝扩展名匹配:

<FilesMatch "\.(inc)$">

Order deny,allow
Deny from all
<FilesMatch>