[dba-Tech] PHP trick...

Stuart McLachlan stuart at lexacorp.com.pg
Wed Mar 16 16:41:24 CST 2005


On 17 Mar 2005 at 0:30, Shamil Salakhetdinov wrote:
> 
> Question: when I have HTML page loaded in a browser from a server, and this
> HTML page has Javascript, which calls PHP function (from compiled PHP file -
> I can't get source)  that possible that this PHP function will work(starts
> a server process, thread) 

Yes, but note that PHP is not compiled and it doesn't need any javascript.
 
<quote>
PHP (recursive acronym for "PHP: Hypertext Preprocessor") is a widely-used 
Open Source general-purpose scripting language that is especially suited 
for Web development and can be embedded into HTML. 
.....
Example:
<html> 
   <head> 
       <title>Example</title> 
   </head> 
   <body> 

       <?php 
       echo "Hi, I'm a PHP script!"; 
       ?> 

   </body> 
</html>

Notice how this is different from a script written in other languages like 
Perl or C -- instead of writing a program with lots of commands to output 
HTML, you write an HTML script with some embedded code to do something (in 
this case, output some text). The PHP code is enclosed in special start and 
end tags that allow you to jump into and out of "PHP mode". 

What distinguishes PHP from something like client-side JavaScript is that 
the code is executed on the server. If you were to have a script similar to 
the above on your server, the client would receive the results of running 
that script, with no way of determining what the underlying code may be. 
You can even configure your web server to process all your HTML files with 
PHP, and then there's really no way that users can tell what you have up 
your sleeve. 
</quote>

>using my credentials and my IP and will download
> file on server side, which my ISP will count as my traffic?
> 

PHP has a full set of FTP functions, so I suppose it's possible for someone 
to set up PHP script to download files from an FTP site to the server and 
then upload them to their own FTP site.  If you are running the script then 
it's possible that your ISP would recognise this and count it as your 
traffic.







-- 
Stuart





More information about the dba-Tech mailing list