在服务器上安全Php执行

Question

I have a php script which updates a database. I want to be sure that no one else can call my script remotely and execute it.

I tried this code but it did not work, the refer was always empty because I use https connection.

if (strpos($_SERVER['HTTPS_REFERER'], 'linkedfilm.com') == false) 
{
    exit();
}

The server is Apache server.

Thanks.

Answer 1

Hello Daina Hodges,

You got a few options to secure this .php script.

1. You can secure this script by moving it into another directory outside of your DOCUMENT_ROOT
2. You can add the .htaccess
3. You can allow only local ip