通过HTTPS连接包含文件

Question

Firstly, let me show you my code:

index.php

<?php
$id = 123456;
include("https://secure.example.com/log.php");
?>

log.php

<?php
echo $id;
?>

This simple code should, in theory, display 123456 on index.php , correct? However, I get nothing. I can only assume it's because I'm trying to include a file over a https connection, but is this actually the case? index.php is NOT on the secure server.

I have the following setting turned on in php.ini :

allow_url_include = 1
allow_url_fopen   = 1

Checking wrappers with the following code:

var_dump(stream_get_wrappers());

Gives me an array showing https :

array(12) {
    [0]=> string(5) "https"
    [1]=> string(4) "ftps"
    [2]=> string(13) "compress.zlib"
    [3]=> string(14) "compress.bzip2"
    [4]=> string(3) "php"
    [5]=> string(4) "file"
    [6]=> string(4) "glob"
    [7]=> string(4) "data"
    [8]=> string(4) "http"
    [9]=> string(3) "ftp"
    [10]=> string(4) "phar"
    [11]=> string(3) "zip"
}

Answer 1

From the manual, always read the manual:

If the target server interprets the target file as PHP code, variables may be passed to the included file using a URL request string as used with HTTP GET. This is not strictly speaking the same thing as including the file and having it inherit the parent file's variable scope; the script is actually being run on the remote server and the result is then being included into the local script.

Answer 2

index.php

<?php
$id = 123456;
include("https://secure.example.com/log.php");
?>

Either log. txt or log. php using <?php echo '<'.'?php' echo $id; ?'.'>'; <?php echo '<'.'?php' echo $id; ?'.'>'; like shown by scragar .

<?php
echo $id;
?>

The big problem here is, that you expose the sourecode of the file on https server - at least partially. You need to do this to be able to parse its contents remotely before the residing server does.

What I suggest to do is a complete different approach.

Connect to the https server using SSH . This is a common and secure way to get data from a different server properly. No risky configuration, no sourcecode exposed to the public.

Another alternative way is to implement a SOAP/REST or simple RPC, like you request the https server and it returns the result in json, which isn't risky, too.

Answer 3

Try turning on some error reporting to see what actually happens:

<?php
    error_reporting (E_ALL);
    ini_set ("display_errors", 1);

    $id = 123456;
    include("https://secure.example.com/log.php");
?>

EDIT: Yes, as I can see now, the real problem probably is that you are not including the source of the log.php but the output of it. So there may be no errors to report.