[Sécurité] Exécution des include()

Bonjour à tous,

je débute en PHP. J'ai défini dans des fichiers .php des variables PHP

exemple :
Code:

1 2 3 $NAME="TEST"; $DTCREATE=20051121120000;
Lorsque je fais un
Code:

1 2 include 'monfichier.php';
ou :
Code:

1 2 3 include('monfichier.php');
Le code de mon script PHP s'affiche tel quel dans ma page HTML. Comment demander l'exécution du script PHP appelé par un INCLUDE?

D'avance merci

salut

as-tu bien une page .php et as-tu un serveur apache-php ?

es tu sur de faire tes include entre les tag <?php ?> et non pas dans du html?

As tu mis les tag <? et ?> dans ton fichier à inclure ?

Le PHP est bien installé, je l'utilise pour lister les fichiers. Je n'ai pas mis de <? ?> dans les fichiers à inclure. Voici un extrait de mon script test.php qui effectue les INCLUDE :

Code:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
 
 
<?
$NBELEM=30;
echo "INDEX = $INDEX";
echo "<BR>";
$HOMEDIR="/data/test/batch";
$DIR=opendir($HOMEDIR);
$CTINDEX=0;
$NBFILE=0;
while ($file = readdir($DIR))
  { 
  if ($file != "." && $file != "..") 
      {
      $NBFILE=$NBFILE + 1;
      $CTINDEX=$CTINDEX + 1;
      if ($CTINDEX>=$INDEX && $CTINDEX<($INDEX+$NBELEM))
        {
        //echo "$file<BR>";
        include "$HOMEDIR/$file/.meta/job_descripteur.php";
        include "$HOMEDIR/$file/.meta/suivi.php";
 
        echo "<tr style=\'mso-yfti-irow:1;height:22.5pt\'>";
 
        echo "<td width=\"2%\" style=\'width:2.66%;background:white;padding:.75pt .75pt .75pt .75pt;height:22.5pt\'>";
        echo '<p class=MsoNormal style=\'mso-element:frame;mso-element-frame-hspace:2.25pt;';
        echo 'mso-element-wrap:around;mso-element-anchor-vertical:paragraph;mso-element-anchor-horizontal:';
        echo 'column;mso-height-rule:exactly\'>&nbsp;</p>';
        echo '</td>';
 
        // Identifiant du job
        echo '<td width="10%" style=\'width:10.1%;background:#FFFF99;padding:.75pt .75pt .75pt .75pt;';
        echo 'height:22.5pt\'>';
        echo '<p class=MsoNormal align=center style=\'text-align:center;mso-element:frame;';
        echo 'mso-element-frame-hspace:2.25pt;mso-element-wrap:around;mso-element-anchor-vertical:';
        echo 'paragraph;mso-element-anchor-horizontal:column;mso-height-rule:exactly\'><span';
        echo "style=\'font-size:8.0pt;font-family:Arial\'>$file<o:p></o:p></span></p>";
        echo '</td>';
 
        // Nom du job
        echo "<td width=\"19%\" style='width:19.12%;background:#FFFF99;padding:.75pt .75pt .75pt .75pt;";
        echo "height:22.5pt'>";
        echo "<p class=MsoNormal style='mso-element:frame;mso-element-frame-hspace:2.25pt;";
        echo "mso-element-wrap:around;mso-element-anchor-vertical:paragraph;mso-element-anchor-horizontal:";
        echo "column;mso-height-rule:exactly'><span class=SpellE><b><span style='font-size:";
        echo "8.0pt;font-family:Arial;color:#000099'></span></b></span><b><span";
        echo "style='font-size:8.0pt;font-family:Arial;color:#000099'> $NAME";
        echo "<o:p></o:p></span></b></p>";
        echo "</td>";
 
        // Description
        echo "<td width=\"28%\" style='width:28.46%;background:#FFFF99;padding:.75pt .75pt .75pt .75pt;";
        echo "height:22.5pt'>";
        echo "<p class=MsoNormal style='mso-element:frame;mso-element-frame-hspace:2.25pt;";
        echo "mso-element-wrap:around;mso-element-anchor-vertical:paragraph;mso-element-anchor-horizontal:";
        echo "column;mso-height-rule:exactly'><span style='font-size:8.0pt;font-family:";
        echo "Arial'>$DESCRIPTION <o:p></o:p></span></p>";
        echo "</td>";
 
        // Date de creation
        echo "<td width=\"7%\" style='width:7.92%;background:#FFFF99;padding:.75pt .75pt .75pt .75pt;";
        echo "height:22.5pt'>";
        echo "<p class=MsoNormal align=center style='text-align:center;mso-element:frame;";
        echo "mso-element-frame-hspace:2.25pt;mso-element-wrap:around;mso-element-anchor-vertical:";
        echo "paragraph;mso-element-anchor-horizontal:column;mso-height-rule:exactly'><span";
        echo "style='font-size:8.5pt;mso-bidi-font-size:8.0pt;font-family:Arial'>25/04/2005 18h25 <o:p></o:p></span></p>";
        echo "</td>";
 
        // Date de maj du programme
        echo "<td width=\"7%\" style='width:7.92%;background:#FFFF99;padding:.75pt .75pt .75pt .75pt;";
        echo "height:22.5pt'>";
        echo "<p class=MsoNormal align=center style='text-align:center;mso-element:frame;";
        echo "mso-element-frame-hspace:2.25pt;mso-element-wrap:around;mso-element-anchor-vertical:";
        echo "paragraph;mso-element-anchor-horizontal:column;mso-height-rule:exactly'><span";
        echo "style='font-size:8.5pt;mso-bidi-font-size:8.0pt;font-family:Arial'>25/04/2005 18h25 <o:p></o:p></span></p>";
        echo "</td>";
 
        // Date de derniere execution
        echo "<td width=\"7%\" style='width:7.92%;background:#FFFF99;padding:.75pt .75pt .75pt .75pt;";
        echo "height:22.5pt'>";
        echo "<p class=MsoNormal align=center style='text-align:center;mso-element:frame;";
        echo "mso-element-frame-hspace:2.25pt;mso-element-wrap:around;mso-element-anchor-vertical:";
        echo "paragraph;mso-element-anchor-horizontal:column;mso-height-rule:exactly'><span";
        echo "style='font-size:8.5pt;mso-bidi-font-size:8.0pt;font-family:Arial'>25/04/2005 18h25 <o:p></o:p></span></p>";
        echo "</td>";
 
        // Actions
        echo "<td width=\"15%\" style='width:15.24%;background:#FFFF99;padding:.75pt .75pt .75pt .75pt;";
        echo "height:22.5pt'>";
        echo "<p class=MsoNormal style='mso-element:frame;mso-element-frame-hspace:2.25pt;";
        echo "mso-element-wrap:around;mso-element-anchor-vertical:paragraph;mso-element-anchor-horizontal:";
        echo "column;mso-height-rule:exactly'><span class=style391><span style='font-size:";
        echo "18.0pt;font-family:Webdings'>Õ</span></span><span style='font-size:18.0pt;";
        echo "font-family:Webdings'>à<span class=style381></span><span class=style371>r</span>";
        echo "<o:p></o:p></span></p>";
        echo "</td>";
 
        echo "</tr>";
 
 
        }
      } 
  }
echo "Nombre de fichier : $NBFILE<BR>";
echo "Index de navigation : "
?>

Code:

1 2 include "$HOMEDIR/$file/.meta/job_descripteur.php"; include "$HOMEDIR/$file/.meta/suivi.php";
job_descripteur et suivi sont des fichiers php donc doivent commencer avec <?php ?> :wink:

Citation:
Envoyé par yiannis
Code:

1 2 include "$HOMEDIR/$file/.meta/job_descripteur.php"; include "$HOMEDIR/$file/.meta/suivi.php";
job_descripteur et suivi sont des fichiers php donc doivent commencer avec <?php ?> :wink:
+1

Ah oui ça marche beaucoup mieux.

Merci beaucoup