eRott Posted August 31, 2007 Share Posted August 31, 2007 Ok, So im looking for some information about the way I have a website setup. So basically, to avoid multiple files and multiple folders etc, I have decided to take advantage of PHP and simplify it all. So lets say I have on my website, 4 main categories/pages if you will. Those pages are: Books Music Video Now, under those categories I have sub pages, for example, under books, I would have pages which list Comedy books, Horror books, and romance novels. So instead of having multiple pages and folders like this: books.php music.php video.php books/comedy.php books/horror.php books/romance.php music/rock.php music/classical.php music/jazz.php video/action.php video/adventure.php video/oldies.php I have decided to simplify it all. So instead, I have everything under one file. So for books, I have and show all the content for comedy books, romance novels, or horror novels, in the same php file. So in books.php some code would look like this: <?php $content = $_GET['c']; if ($content == "comedy") { echo "list of comedy books"; } elseif ($content == "horror") { echo "list of horror books"; } elseif ($content == "romance") { echo "list of romance books"; } else { echo "welcome to the books section."; } ?> And then to display the appropriate content, the link would be formed like this: http://www.domain.com/books.php?c=comedy Now, my concern is, is it possible to enter some sort of coding in that URL variable to gain access to the website or do something malicious, (hack the website). Is this way secure, are there any problems with this type of content management? If so, is it possible to make it secure to be able to use it, or should i just make a bunch of different files? Thanks for the help, eRott Link to comment https://forums.phpfreaks.com/topic/67456-solved-php-security-vulnerability/ Share on other sites More sharing options...
Daniel0 Posted August 31, 2007 Share Posted August 31, 2007 That should be quite fine. Link to comment https://forums.phpfreaks.com/topic/67456-solved-php-security-vulnerability/#findComment-338639 Share on other sites More sharing options...
xyn Posted August 31, 2007 Share Posted August 31, 2007 though you could improve the SEO, By looking up Mod rewrite! Link to comment https://forums.phpfreaks.com/topic/67456-solved-php-security-vulnerability/#findComment-338642 Share on other sites More sharing options...
eRott Posted August 31, 2007 Author Share Posted August 31, 2007 Hmmm. Search engines... you make a good point xyn.. How will search engines handle something like this? Although, im unsure what you mean by Mod rewrite. Link to comment https://forums.phpfreaks.com/topic/67456-solved-php-security-vulnerability/#findComment-338645 Share on other sites More sharing options...
Daniel0 Posted August 31, 2007 Share Posted August 31, 2007 [...] im unsure what you mean by Mod rewrite. http://httpd.apache.org/docs/2.2/mod/mod_rewrite.html Link to comment https://forums.phpfreaks.com/topic/67456-solved-php-security-vulnerability/#findComment-338668 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.