I've got 3 folders that contain PHP scripts:
- core
- custom_modules_1 (cm1)
- custom_modules_2 (cm2)
The core is executed by Apache and includes (require_once) files from either cm1 or cm2. It never includes cm1 & cm2 at the same time.
But the problem occurs when cm1 includes a file from cm2, which should be prevented, but how?
I'm running a VPS CentOS server with cPanel, so ACL is probably not an option since it could break cPanel.