Find out 'who' is requiring

[lobobr]

I have a PHP file that requires another, but I'm concerned by security issues, so I ask you:

Is there a way to check wich file is checking the other?

For an example:

file1.php

<?php
require ('file2.php');
?>

file2.php

<?php
if (! ... ) //check
{
die('Invalid requirer!');
}
?>

TIA,

[devinemke]

simply check the contents of the [man]get_included_files[/man] array.

[lobobr]

Great, but...

I'd like to check the path or even better the URL of the file that is requiring, so files outside my domain can't require/include.

It would be something like checking the HTTP_REFERER.

Any ideas?

TIA,

[drew010]

in the file being included, if you use $SERVER['PHP_SELF'] it will identify as the script calling it, so I suppose you could use that to check who is trying to include it. You could use that in combination with $SERVER['DOCUMENT_ROOT'] to figure out who it is.

[devinemke]

values in the [man]get_included_files[/man] are full absolute filesystem paths. it should not be too hard to figure out if the referring file is not legit.