I’ve got 3 folders that contain PHP scripts:
- core
- custom_modules_1 (cm1)
- custom_modules_2 (cm2)
The core is executed by Apache and includes (require_once) files from either cm1 or cm2. It never includes cm1 & cm2 at the same time.
But the problem occurs when cm1 includes a file from cm2, which should be prevented, but how?
I’m running a VPS CentOS server with cPanel, so ACL is probably not an option since it could break cPanel.
Thank you for your answers, but the only way I’ve managed to force the wanted restrictions was using php auto_prepend_file to append a file that does certain checks inside every php file that is included.