When a site displays " /php" after their domain, what up?

Question

Example "www.xyz.com/php" rather than "www.xyz.com"
Does that mean files are exposed on the 'Net that could be a security concern for visitors, especially SQL injections?

Answer 1

PHP is a server-side scripting language for creating dynamic Web pages. You create pages with PHP and HTML. When a visitor opens the page, the server processes the PHP commands and then sends the results to the visitor's browser, just as with ASP or ColdFusion. Unlike ASP or ColdFusion, however, PHP is Open Source and cross-platform. PHP runs on Windows NT and many Unix versions, and it can be built as an Apache module and as a binary that can run as a CGI. When built as an Apache module, PHP is especially lightweight and speedy. Without any process creation overhead, it can return results quickly, but it doesn't require the tuning of mod_perl to keep your server's memory image small.



In addition to manipulating the content of your pages, PHP can also send HTTP headers. You can set cookies, manage authentication, and redirect users. It offers excellent connectivity to many databases (and ODBC), and integration with various external libraries that let you do everything from generating PDF documents to parsing XML.



PHP goes right into your Web pages, so there's no need for a special development environment or IDE. You start a block of PHP code with . (You can also configure PHP to use ASP-style <% %> tags or even .) The PHP engine processes everything between those tags.



PHP's language syntax is similar to C's and Perl's. You don't have to declare variables before you use them, and it's easy to create arrays and hashes (associative arrays). PHP even has some rudimentary object-oriented features, providing a helpful way to organize and encapsulate your code.



Although PHP runs fastest embedded in Apache, there are instructions on the PHP Web site for seamless setup with Microsoft IIS and Netscape Enterprise Server. If you don't already have a copy of PHP, you can download it at the official Web site. You'll also find a manual that documents all of PHP's functions and features.

Answer 2

Yeah, what Marvin said. PHP is a development language (think also HTML, but PHP serves a different purpose - it interacts with the server to produce the right HTML).



The main difference between PHP and HTML in laymans terms, is PHP allows you to interact with a database to produce dynamic content on a page. That means the site authors/developers can edit and produce content from a system (called a Content Managment System, like Joomla, Drupal, Wordpess, etc etc) and the markup (HTML) doesn't have to be changed for the new content to appear on the page for the user.



Usually you'd see it in this format: http://somesite.com/index.php. The actual reason you'll often see the PHP part appear after you've clicked the link, or the entered a URL that doesn't have it, is because what you're entering in that case is a URL to a directory, and the browsers default behavior when it gets to a directory is to look for an index file. So, if the index file is a php file, your'll see that etension. Just like if the index file is just an HTML file, you'll see that extension.

Answer 3

As the some of the others mention, PHP is a scripting language used to create dynamic webpages (other methods include ASP and AJAX.) The PHP script writes HTML content to the browser and interprets the user responses, typically then sending SQL queries to a server for new content. While SQL injection is certainly a possibility, it isn't that difficult to write the PHP in such a way to combat this (in fact, newer versions have built-in functions specifically designed to eliminate such.)

Answer 4

php is a scripting language used to perform tasks on a webserver.



For example - if you are a member of a site and you forget your password, you can normally use a "lost password" box to get it emailed to you.



That task is carried out by a php script which is activated by your use of the lost password facility.



The php script would:

» take the username or email you entered

» look it up in the membership database

» find the password field

» find the email field

» find the correct email template

» insert the password into the email template

» send you an email

» write the event to a log



In many circs this is done together with a SQL database - but there is nothing about php that means is must be malicious.

Answer 5

below is the link of the final one that i comprehend off, there according to danger be others yet as quickly as I did examine as for as quickly as I used to do coding for a internet site that was up that had to handle politics earlier it replaced into replaced to a clean internet site using funds it have been given and a clean coder re-did the area.

Answer 6

i think that link supports for printing purpose