viewing source of PHP page?

On Mon, 15 Sep 2003 00:10:05 +0100, Rocky <Rocky.TakeThisOut@GhostRecon.net> wrote:

 > How can I get a look at the source code for a php page on a website. If I
 > right click>view source, it's not the raw code I am getting, but some
 > stripped down version.
 >
 > Anyone know?

You don't, unless you have authorized FTP access to the site. PHP code
can often contain authorization variables like MySQL passwords, cookie
settings and such which are a bad idea to make public. Thus the PHP
source is visible by those with FTP access alone.

Grey

--
The technical axiom that nothing is impossible sinisterly implies the
pitfall corollory that nothing is ridiculous.
- <a style='text-decoration: underline;' href="http://www.greywyvern.com" target="_blank">http://www.greywyvern.com</a> - ORCA - Camouflaged PHP Web Scripts.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: viewing source of PHP page? 

Rocky wrote:
 > How can I get a look at the source code for a php page on a website.
 > If I right click>view source, it's not the raw code I am getting, but
 > some stripped down version.

What you see is the HTML output from the PHP script.

 > Anyone know?

You need access to the server to see the code.

--
William Tasso - <a style='text-decoration: underline;' href="http://WilliamTasso.com" target="_blank">http://WilliamTasso.com</a><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: viewing source of PHP page? 

Rocky wrote:

 > How can I get a look at the source code for a php page on a website. If I
 > right click>view source, it's not the raw code I am getting, but some
 > stripped down version.
 >
 > Anyone know?

You can't. Short of emailing the webmaster of the site and asking if you
can see their PHP code (and I doubt they will say yes), there is no way
other than server failure in which you can see the PHP source.

--
Dylan Parry
<a style='text-decoration: underline;' href="http://www.webpageworkshop.co.uk" target="_blank">http://www.webpageworkshop.co.uk</a> - FREE Web tutorials and references
Now playing: Sky - Westway<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: viewing source of PHP page? 

"GreyWyvern" <SP_bhuisman.RemoveThis@greywyvern.com_AM> wrote in message
news:oprvint0liv0in9v@news.ican.net...
 > On Mon, 15 Sep 2003 00:10:05 +0100, Rocky <Rocky.RemoveThis@GhostRecon.net> wrote:
 >
  > > How can I get a look at the source code for a php page on a website. If
I
  > > right click>view source, it's not the raw code I am getting, but some
  > > stripped down version.
  > >
  > > Anyone know?
 >
 > You don't, unless you have authorized FTP access to the site. PHP code
 > can often contain authorization variables like MySQL passwords, cookie
 > settings and such which are a bad idea to make public. Thus the PHP
 > source is visible by those with FTP access alone.
Including anyone hosting on the same machine - which raises the point that
to see the code the OP would only need to take hosting on the same server
for a short time to be able to access the code. (assuming the code is hosted
on a shared server <!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: viewing source of PHP page? 

Bill Logan wrote:
 > "GreyWyvern" <SP_bhuisman.DeleteThis@greywyvern.com_AM> wrote in message
 > news:oprvint0liv0in9v@news.ican.net...
  >> On Mon, 15 Sep 2003 00:10:05 +0100, Rocky <Rocky.DeleteThis@GhostRecon.net>
  >> wrote:
  >>
   >>> How can I get a look at the source code for a php page on a
   >>> website. If I right click>view source, it's not the raw code I am
   >>> getting, but some stripped down version.
   >>>
   >>> Anyone know?
  >>
  >> You don't, unless you have authorized FTP access to the site. PHP
  >> code can often contain authorization variables like MySQL passwords,
  >> cookie settings and such which are a bad idea to make public. Thus
  >> the PHP source is visible by those with FTP access alone.
 >
 > Including anyone hosting on the same machine - which raises the point
 > that to see the code the OP would only need to take hosting on the
 > same server for a short time to be able to access the code. (assuming
 > the code is hosted on a shared server

How so? I thought we agreed in another thread that even LAMP set-ups could
be made private.

Rock on Windows ;o)

--
William Tasso - <a style='text-decoration: underline;' href="http://WilliamTasso.com" target="_blank">http://WilliamTasso.com</a><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: viewing source of PHP page? 

Bill Logan wrote:
 > "GreyWyvern" <SP_bhuisman.DeleteThis@greywyvern.com_AM> wrote in message
 > news:oprvint0liv0in9v@news.ican.net...
 >
  >>On Mon, 15 Sep 2003 00:10:05 +0100, Rocky <Rocky.DeleteThis@GhostRecon.net> wrote:
  >>
  >>
   >>>How can I get a look at the source code for a php page on a website. If
 >
 > I
 >
   >>>right click>view source, it's not the raw code I am getting, but some
   >>>stripped down version.
   >>>
   >>>Anyone know?
  >>
  >>You don't, unless you have authorized FTP access to the site. PHP code
  >>can often contain authorization variables like MySQL passwords, cookie
  >>settings and such which are a bad idea to make public. Thus the PHP
  >>source is visible by those with FTP access alone.
 >
 > Including anyone hosting on the same machine - which raises the point that
 > to see the code the OP would only need to take hosting on the same server
 > for a short time to be able to access the code. (assuming the code is hosted
 > on a shared server

What do you mean by shared server? Like I'm having a site at
<a style='text-decoration: underline;' href="http://www.domain.com/~myname." target="_blank">www.domain.com/~myname.</a> I'm not sharing with a person at
<a style='text-decoration: underline;' href="http://www.domain.com/~hisname," target="_blank">www.domain.com/~hisname,</a> am I?



--
Els

Mente humana é como pára-quedas; funciona melhor aberta.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: viewing source of PHP page? 

"Els" <els.aNOSPAM.TakeThisOut@PLEASEtiscali.nl.invalid> wrote in message
news:bk3reo$ibd$1@reader1.tiscali.nl...
 > What do you mean by shared server? Like I'm having a site at
 > <a style='text-decoration: underline;' href="http://www.domain.com/~myname." target="_blank">www.domain.com/~myname.</a> I'm not sharing with a person at
 > <a style='text-decoration: underline;' href="http://www.domain.com/~hisname," target="_blank">www.domain.com/~hisname,</a> am I?
 >
 >

Yes. You're on the same server as domain.com

--
McWebber
No email replies read
If someone tells you to forward an email to all your friends
please forget that I'm your friend.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: viewing source of PHP page? 

McWebber wrote:

 > "Els" <els.aNOSPAM.DeleteThis@PLEASEtiscali.nl.invalid> wrote in message
 > news:bk3reo$ibd$1@reader1.tiscali.nl...
 >
  >>What do you mean by shared server? Like I'm having a site at
  >>www.domain.com/~myname. I'm not sharing with a person at
  >>www.domain.com/~hisname, am I?
 >
 > Yes. You're on the same server as domain.com

I did figure that, but I meant (I know, didn't write what I
meant) sharing as in
<quote>
  >>Thus the PHP source is visible by those with FTP access alone.
 >Including anyone hosting on the same machine - which raises the
 >point that to see the code the OP would only need to take hosting
 >on the same server for a short time to be able to access the code.
 >(assuming the code is hosted on a shared server
</quote>

But I got some answer already from others; it appears this
is only the case when the hosting company didn't take the
right precautions









--
Els

Mente humana é como pára-quedas; funciona melhor aberta.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: viewing source of PHP page? 

On Mon, 15 Sep 2003 15:07:58 +0200, Els
<els.aNOSPAM RemoveThis @PLEASEtiscali.nl.invalid> wrote:

 > McWebber wrote:
 >
  >> "Els" <els.aNOSPAM RemoveThis @PLEASEtiscali.nl.invalid> wrote in message
  >> news:bk3reo$ibd$1@reader1.tiscali.nl...
  >>
   >>> What do you mean by shared server? Like I'm having a site at
   >>> <a style='text-decoration: underline;' href="http://www.domain.com/~myname." target="_blank">www.domain.com/~myname.</a> I'm not sharing with a person at
   >>> <a style='text-decoration: underline;' href="http://www.domain.com/~hisname," target="_blank">www.domain.com/~hisname,</a> am I?
  >>
  >> Yes. You're on the same server as domain.com
 >
 > I did figure that, but I meant (I know, didn't write what I meant)
 > sharing as in
 > <quote>
   >>> Thus the PHP source is visible by those with FTP access alone.
  >> Including anyone hosting on the same machine - which raises the point
  >> that to see the code the OP would only need to take hosting on the same
  >> server for a short time to be able to access the code.
  >> (assuming the code is hosted on a shared server
 > </quote>
 >
 > But I got some answer already from others; it appears this is only the
 > case when the hosting company didn't take the right precautions

The short answer is, if you can read everyone else's files on your server,
everyone else can read yours. That's a big clue to get the hell out of
there

Grey

--
The technical axiom that nothing is impossible sinisterly implies the
pitfall corollory that nothing is ridiculous.
- <a style='text-decoration: underline;' href="http://www.greywyvern.com" target="_blank">http://www.greywyvern.com</a> - Orca RingMaker: PHP web ring creation and
management<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: viewing source of PHP page? 

Els wrote:
 > Bill Logan wrote:
 >
  >> "GreyWyvern" <SP_bhuisman.TakeThisOut@greywyvern.com_AM> wrote in message
  >> news:oprvint0liv0in9v@news.ican.net...
  >>
   >>> On Mon, 15 Sep 2003 00:10:05 +0100, Rocky <Rocky.TakeThisOut@GhostRecon.net> wrote:
   >>>
   >>>
   >>>> How can I get a look at the source code for a php page on a website. If
  >>
  >>
  >> I
  >>
   >>>> right click>view source, it's not the raw code I am getting, but some
   >>>> stripped down version.
   >>>>
   >>>> Anyone know?
   >>>
   >>>
   >>> You don't, unless you have authorized FTP access to the site. PHP code
   >>> can often contain authorization variables like MySQL passwords, cookie
   >>> settings and such which are a bad idea to make public. Thus the PHP
   >>> source is visible by those with FTP access alone.
  >>
  >>
  >> Including anyone hosting on the same machine - which raises the point
  >> that
  >> to see the code the OP would only need to take hosting on the same
  >> server
  >> for a short time to be able to access the code. (assuming the code is
  >> hosted
  >> on a shared server
 >
 >
 > What do you mean by shared server? Like I'm having a site at
 > <a style='text-decoration: underline;' href="http://www.domain.com/~myname." target="_blank">www.domain.com/~myname.</a> I'm not sharing with a person at
 > <a style='text-decoration: underline;' href="http://www.domain.com/~hisname," target="_blank">www.domain.com/~hisname,</a> am I?

AFAICT it depends on the server configuration, but if the job is poorly
done, then yes, that is possible.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: viewing source of PHP page? 

"William Tasso" <ngx RemoveThis @tbdata.com> wrote in message
news:bk3qhp$o9jdi$1@ID-139074.news.uni-berlin.de...
 > Bill Logan wrote:
  > > "GreyWyvern" <SP_bhuisman RemoveThis @greywyvern.com_AM> wrote in message
  > > news:oprvint0liv0in9v@news.ican.net...
   > >> On Mon, 15 Sep 2003 00:10:05 +0100, Rocky <Rocky RemoveThis @GhostRecon.net>
   > >> wrote:
   > >>
   > >>> How can I get a look at the source code for a php page on a
   > >>> website. If I right click>view source, it's not the raw code I am
   > >>> getting, but some stripped down version.
   > >>>
   > >>> Anyone know?
   > >>
   > >> You don't, unless you have authorized FTP access to the site. PHP
   > >> code can often contain authorization variables like MySQL passwords,
   > >> cookie settings and such which are a bad idea to make public. Thus
   > >> the PHP source is visible by those with FTP access alone.
  > >
  > > Including anyone hosting on the same machine - which raises the point
  > > that to see the code the OP would only need to take hosting on the
  > > same server for a short time to be able to access the code. (assuming
  > > the code is hosted on a shared server
 >
 > How so? I thought we agreed in another thread that even LAMP set-ups
could
 > be made private.
 >
The key word there is 'could'
Unfortunately - the large proportion of shared servers are often less than
secure in that respect.
They could be but usually aren't.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: viewing source of PHP page? 

Bill Logan wrote:
 > "William Tasso" <ngx.TakeThisOut@tbdata.com> wrote in message
 > news:bk3qhp$o9jdi$1@ID-139074.news.uni-berlin.de...
  >> Bill Logan wrote:
   >>> "GreyWyvern" <SP_bhuisman.TakeThisOut@greywyvern.com_AM> wrote in message
   >>> news:oprvint0liv0in9v@news.ican.net...
   >>>> On Mon, 15 Sep 2003 00:10:05 +0100, Rocky <Rocky.TakeThisOut@GhostRecon.net>
   >>>> wrote:
   >>>>
   >>>>> How can I get a look at the source code for a php page on a
   >>>>> website. If I right click>view source, it's not the raw code I am
   >>>>> getting, but some stripped down version.
   >>>>>
   >>>>> Anyone know?
   >>>>
   >>>> You don't, unless you have authorized FTP access to the site. PHP
   >>>> code can often contain authorization variables like MySQL
   >>>> passwords, cookie settings and such which are a bad idea to make
   >>>> public. Thus the PHP source is visible by those with FTP access
   >>>> alone.
   >>>
   >>> Including anyone hosting on the same machine - which raises the
   >>> point that to see the code the OP would only need to take hosting
   >>> on the same server for a short time to be able to access the code.
   >>> (assuming the code is hosted on a shared server
  >>
  >> How so? I thought we agreed in another thread that even LAMP
  >> set-ups could be made private.
  >>
 > The key word there is 'could'
 > Unfortunately - the large proportion of shared servers are often less
 > than secure in that respect.
 > They could be but usually aren't.

strikes me that this piece of information is critical when reviewing hosting
options

--
William Tasso - <a style='text-decoration: underline;' href="http://WilliamTasso.com" target="_blank">http://WilliamTasso.com</a><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: viewing source of PHP page? 

William Tasso wrote:

 > Bill Logan wrote:
 >
  >>"William Tasso" <ngx DeleteThis @tbdata.com> wrote in message
  >>news:bk3qhp$o9jdi$1@ID-139074.news.uni-berlin.de...
  >>
   >>>Bill Logan wrote:
   >>>
   >>>>"GreyWyvern" <SP_bhuisman DeleteThis @greywyvern.com_AM> wrote in message
   >>>>news:oprvint0liv0in9v@news.ican.net...
   >>>>
   >>>>>On Mon, 15 Sep 2003 00:10:05 +0100, Rocky <Rocky DeleteThis @GhostRecon.net>
   >>>>>wrote:
   >>>>>
   >>>>>
   >>>>>>How can I get a look at the source code for a php page on a
   >>>>>>website. If I right click>view source, it's not the raw code I am
   >>>>>>getting, but some stripped down version.
   >>>>>>
   >>>>>>Anyone know?
   >>>>>
   >>>>>You don't, unless you have authorized FTP access to the site. PHP
   >>>>>code can often contain authorization variables like MySQL
   >>>>>passwords, cookie settings and such which are a bad idea to make
   >>>>>public. Thus the PHP source is visible by those with FTP access
   >>>>>alone.
   >>>>
   >>>>Including anyone hosting on the same machine - which raises the
   >>>>point that to see the code the OP would only need to take hosting
   >>>>on the same server for a short time to be able to access the code.
   >>>>(assuming the code is hosted on a shared server
   >>>
   >>>How so? I thought we agreed in another thread that even LAMP
   >>>set-ups could be made private.
   >>>
  >>
  >>The key word there is 'could'
  >>Unfortunately - the large proportion of shared servers are often less
  >>than secure in that respect.
  >>They could be but usually aren't.
 >
 >
 > strikes me that this piece of information is critical when reviewing hosting
 > options

Any advice on how to find out when looking for hosting?

--
Els

Mente humana é como pára-quedas; funciona melhor aberta.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: viewing source of PHP page?