ansaurus

Question

How to detect if file is being accessed or requested?

Answer 1

+3 A:

Artefacto 2010-09-12 21:22:21

I don't think this is what the OP means. (Although I'm not sure *what* the OP means.)

Pekka 2010-09-12 21:23:52

Both accessing the page and making a call returned true on your second answer.

BrunoLM 2010-09-12 21:24:29

@Pekka Well, I just read the title :p

Artefacto 2010-09-12 21:24:44

`debug_backtrace` returned an empty array.

BrunoLM 2010-09-12 21:27:07

@Bruno I've edit my answer, but I'm still not sure if this is what you want. Perhaps you should write a clearer question.

Artefacto 2010-09-12 21:29:33

Answer 2

A:

By "it should do nothing special" do you mean it shouldn't redirect?

So the Q is really if user accesses a URL for a PHP file directly, it should redirect, if thru AJAX, process as normal? (to really clarify, you mean thru a URL and not thru a include statement, right?)

Answer: You can't. Artefacto mentions the HTTP_X_REQUESTED_WITH header - sure, but that can be faked.

Is it really so bad is the user accesses the URL directly? If the answer is "OMG Yes!" then maybe there is something wrong with how the system is designed. Redesign it until the answer is "Actually, I suppose it wouldn't really hurt."

James 2010-09-12 21:36:11

In this case it doesn't matter if it can be faked. And it is important that the page redirect because search engines wouldn't work properly for this application.

BrunoLM 2010-09-12 21:51:24

Search engines? I don't understand. You don't want this page to appear in search engines? If this page is linked only from Javascript AJAX calls then a search engine bot will never find it and will never visit it. IF you are really paranoid that the link will leak out, put a X-Robots-Tag http header on it. http://googleblog.blogspot.com/2007/07/robots-exclusion-protocol-now-with-even.html

James 2010-09-12 22:08:24

Answer 3

A:

If you really don't want someone accessing /site/page.php, you should consider moving /site/page.php outside of your web root. Then make your index.php load it as needed:

<?php 
$includes = "/path/to/includes";  // specified in a config file somewhere

if ($_GET["view"] == "page") {
    require_once(path_join($includes, "page.php")); 
    DoStuffInPageDotPHP();
}
else {
    DoSomethingElse();
}
?>

Seth 2010-09-12 21:37:04

ansaurus

tags:

views:

answers:

How to detect if file is being accessed or requested?

related questions