show_source()

[ShawnK]

I was testing the integrity of my script by doing differant types of attacks such as sql injections, fake cookies, etc. One way I found to break my script using show_source to reveal the variables and also reveal the "formula" I use for cookie id's. Is there a way to block anyother site but my own from using show_source() on my files?

[sarahk]

I'm assuming it's your javascript you're worried about here since calling a php script will still only show the generated code, not the source code.

Read up on using .htaccess and mod_rewrite to stop "hotlinking" = that is, calling your scripts from other sites.

It's mostly used to stop people showing your graphics or downloads on other sites and consuming your bandwidth.

Sarah