Php or Html Files or both when writing a website?

I have a question when you want to make a social network or something of that norm. Will my site be less secure If I write every file in php as oppose to whole html files with php scripts included? I know writing everything in php makes everything much simpler but is it secure as html? Thanks.

Billh93 wrote:I have a question when you want to make a social network or something of that norm. Will my site be less secure If I write every file in php as oppose to whole html files with php scripts included? I know writing everything in php makes everything much simpler but is it secure as html? Thanks.

If you were making a social networking site then you would have to use php or some kind of server side language and you would also want probably want to store user info in a database. Just HTML would be secure because there is nothing to exploit, however without php you cant really do anything but display info.

HTML code is usually included in the php file. For example index.php would look like this:

Code: Select all: <?php php code(); ?> <html> <head> </head> <body> <p>text stuff<p> </body> </html>

ahh okay thanks for the input! btw how do I mask the url for my php files. Example: www.site.com/?phpid=34242 into www.site.com/settings .

Billh93 wrote:ahh okay thanks for the input! btw how do I mask the url for my php files. Example: http://www.site.com/?phpid=34242 into http://www.site.com/settings .

You dont really, there is not any need to. "index.php" is the file that loads by default when going to a url like http://www.site.com/settings. "?phpid=34242" is a GET variable which are displayed in the url, if you wanted to hide the form data you would use a POST request. POST requested are used for things like username and password input. GET requests are fine for things like "?page=2", just make sure it's not vulnerable to injections.

When creating a secure site it is much more import that you have good code then just trying to hide everything. Dont rely on security through obscurity.

0phidian +1

I think it's possible to loose the get-variables alltogether if you turn it into a RESTful site. I've only taken a quick look at it, so I can't be certain.

http://en.wikipedia.org/wiki/Representational_state_transfer

You'll have to plan everything out though.

Oh okayy, thanks guys all of you have been really helpful!

Php or Html Files or both when writing a website?

Php or Html Files or both when writing a website?

Re: Php or Html Files or both when writing a website?

Re: Php or Html Files or both when writing a website?

Re: Php or Html Files or both when writing a website?

Re: Php or Html Files or both when writing a website?

Re: Php or Html Files or both when writing a website?

Re: Php or Html Files or both when writing a website?

Who is online