if the php file is printed rather than executed, the include will not be followe...

lsc on March 19, 2011 | parent | context | favorite | on: I think tumblr has a huge security hole

if the php file is printed rather than executed, the include will not be followed. You'd see the "include /path/to/inaccessible/file" but you wouldn't see the passwords within the include.

I think. I haven't seriously used php since 2003 or so.

russss on March 19, 2011 [–]

Yes, but included files still need a <?php tag at the top, or PHP just prints them out.