Config file access for changes...

nadeauz

I have a php config file with variables defined. I "include" this file into other pages. My question is:

Is there a way to edit this page with HTML web page without sacrificing security?

Thanks in advance for any assistance.

Sample config file line:

$Host = "localhost";

I want to edit the "localhost" value on the web through a non linked page to my site. I will would like to see it and edit the value.

This would become an Admin page if you will.

nadeauz

Can someone offer insight into creation of a web page to use to edit the variable data in my config file please? Thanks for the input in advance.

feldon23

Just make a PHP page with a form with a textarea that displays the contents of the entire file. Hitting "Submit" writes the file back out.

Protect this page with .htaccess

nadeauz

Thanks Feldon23! I will try this out later this week.

feldon23

<?php

if(!isset($_POST['submit'])) {

?>

<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
<textarea wrap=soft name="data" rows=20 cols=60><?php readfile("includefile.php"); ?></textarea>
<INPUT TYPE="submit" NAME="submit" VALUE="Save Changes">
</FORM>

<?php
} else {

$fp = fopen("includefile.php","w+");
fwrite($fp, $_POST['data']);
fclose($fp);

}
?>

Weedpacket

Or a (more complex, but safer) form that provides fields for each of the config settings (checkboxes for boolean stuff, text fields for strings, dropdowns when the options are limited, etc.). It limits what can be done to the config, and allows you to ensure that nothing stupid was entered before writing the file back out.

nadeauz

Thanks guys for the replies! I think I about have it now.