using full path in code

I'm working on a bit of php code and one of the functions requires use of the full path; i.e. the one that includes /home/account_name/public_html/...

Is using the hosting account name in php code a big security risk? Would I be giving a hacker information that they couldn't easily find elsewhere?

[Join us @ facebook]

No it is not a security risk. If the hacker could execute php code in your account they could use a command like:

echo dirname( __FILE__ );
?>

This will expose the directory that the file exists

So, if I'm understanding you correctly; the account name is something a hacker could find on their own anyway?

My concern is that I'm just not making it easier for someone to try to log in to my account by providing them with the user name and making it a matter of guessing the password.

[Join us @ facebook]

Yeah knowing the directory is the most simple thing. In fact this is someting that in most cases you can guess as cpanel (or any other common hosting control panel software) has a standard way to create directories.

Thank you Nikolas.

Thanks for this cod.

nice tip thanks

Yeah don't use it or use it .

[Guest]

[62.885]

Googlebot