Can PHP files with an extension of .php.xx be executed as PHP? -
say have file myfile.php
executes php code. file somehow (any possible way) executed if named myfile.php.xx
, xx
characters? myfile.phpxx
? other types of executable files in same situation (.pl, .exe, .dll, etc)?
i'm working on firewall, using regexes check file names these types of files. enough check end of file .php, .exe, etc., or should check comes after it, too?
it's completely web server decide how wants handle given url. if wants treat url 20-digit number accessed @ 2:35 in afternoon on third thursday in month php script prerogative. attempting guess web server strictly url requested not possible.
Comments
Post a Comment