[RESOLVED] checking for include

[drag0n]

how can i check whether a file is being accessed as an include() from another page on my server?
I want to make certain php pages to only be able to be included and not accessed directly through the browser.

thanks in advanced

[NogDog]

Start of include file:

<?php
if(str_replace('\\', '/', __FILE__) == $_SERVER['SCRIPT_FILENAME'])
{
   die("Whatever error message you want to display");
}

Note: the str_replace is needed for Windows systems. It can be omitted for *nix systems, though it does not hurt to leave it in for maximum script portability.

PS: Another option is simply to keep all include files in a directory which is not accessible from the web.

[drag0n]

thanks! works like a charm!
however... what exactly does the code look for?
thanks!

[bradgrafelman]

It checks to see that the FILE magic constant (man:[man]language.constants.predefined[/man]) is equal to $_SERVER['SCRIPT_FILENAME'] (man:reserved.variables#reserved.variables.server).