ajoo Posted April 27, 2017 Share Posted April 27, 2017 Hi all ! I am using a drop down menu to fill a part of a form which uses the jquery $ajax function to pass data to the server. $.ajax({ type: "POST", url: "testdata.php", . . I have for the time being placed the testdata.php script that ajax calls in the root folder and that works fine. The question is that is it OK to place the testdata.php in the root folder ? Should i place this script along with my other scripts outside the root folder ? What's the right / correct way ? Thanks all ! Link to comment Share on other sites More sharing options...
Jacques1 Posted April 27, 2017 Share Posted April 27, 2017 You cannot put the script outside of the document root, because then it isn't accessible for the client. “Ajax requests” are just plain old HTTP requests. They work exactly like any other request. Link to comment Share on other sites More sharing options...
ajoo Posted April 27, 2017 Author Share Posted April 27, 2017 If however it could be done, it would also expose the internal path that would need to be passed into the ajax function along with the script name, probably creating a greater security risk maybe. Thank loads. Link to comment Share on other sites More sharing options...
Jacques1 Posted April 27, 2017 Share Posted April 27, 2017 Files outside of the document root are by definition not publicly accessible, so passing filesystem paths to the webserver doesn't work. If the client could just ask for an arbitrary file (like /etc/passwd), that would be insane. Link to comment Share on other sites More sharing options...
ajoo Posted April 27, 2017 Author Share Posted April 27, 2017 Thanks for clearing that ! Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.