How to download a php file

Hey,

I found a really cool script on a guys site, and it got me to thinking...even though PHP is server side so you wouldnt be able to view source or anything...is there any way you could just downloadtheir PHP script or what?

 

Not unless you have direct access to their server files as far as i know, otherwise it would become a big security risk.

PHP files "run" on the web server then output the page as html code to your browser so you only see it's output.

Best you can do is try to find the scripts name and see if it is available, as the site to see you the script if it is their won, or get someone to make you one that does the same thing.

If you post the url of the site, someone here may know what it is or how to do the same thing.

 

yea, I know the name of the file and everything, tried every way possible ....just didnt know if someone knew of a way to just download it without rendering...after all, it is a file...just thought maybe there was a chance, no biggie. Thanks anyway

 

The file is compiled and generated on the server before being transfered as hypertext.

 

PHP will only output html you cant get the codes . but u can hire a person who can create a clone

 

You need to look into javascripts in the page. That may be the one for the effect. PHP files normally don't do the effects.

 

I think everyone misunderstood me....
Without Options - Indexes in your htaccess someone can pretty much jack anything they want by viewing the directory of files....SO, CAN you download a PHP script without the server parsing the PHP and compiling the html? I understand how PHP works and that wasn't really what I was asking...I just wanted to know if it is possible to download a PHP file from an unprotected directory.

 

Well yes, if PHP is somehow disabled on the server it will output just as regular text. I believe this has happened to facebook once before and some people were able to grab a couple of pages. That's why it's best to use a front controller pattern:

Only have 1 index.php file that handles all requests:

index.php?module=bla loads public_html/../modules/bla.php etc

So those php files are outside the document root and can never be viewed should such an unfortunate apache error occur (this could happen after a faulty apache/php upgrade, for example)

 

It's doable but gets into the hacking discussion that's against the rules of the forum here.

Please think of it this way. Most folks have scripts where their username, password, and database information is contained within a php file. If that was downloadable, one could have complete access to your hosting account. Or at least MySQL.