Can i put a PHP variable inside a PHP include?

Question

I am unfamiliar with PHP; I suspect this is an easy question. Our web designer is out of town and I need to fix something on one of our web sites.

Basically, I want to be able to use a variable as part of a URL that is being called into a document.

the code:

<?php
$URL = p2 ; /* p1, p2, p3 or no can be used here */
?>

<?php include('includes/WL_cart_*URL*.php'); // calls the page I need?>

I just want to be able to type the correct page in $URL and that text be added to the url in the include. I tried putting the variable directly into the include but that didn’t work.

You can concatenate the var inside the include yes like this: ` — Adidi, Mar 25 '13 at 13:56
Yes, you can, but remember that if not done properly - this can lead to serious security issue (so called file include exploit), read here for more details: http://blog.nearlyfreespeech.net/2009/11/05/a-php-include-exploit-explained/ — Bud Damyanov, Mar 25 '13 at 13:57
this place is amazing, pop out to get a sandwich and so much help! ill just go try one o two of these things and get back to you all! thank you all! — Penfold0101, Mar 25 '13 at 14:16

score 4 · Accepted Answer · answered Mar 25 '13 at 13:56

4

You can achieve this by using double quotes like so:

<?php include("includes/WL_cart_{$URL}.php"); ?>

or if you insist on using single quotes, exiting them, and adding the $URL variable works, like so:

<?php include('includes/WL_cart_'.$URL.'.php'); ?>

answered Mar 25 '13 at 13:56

Stefan Candan

881
6
10

...and wrap the variable in quotes or your script will fail: `$URL = 'p2';` – okyanet Mar 25 '13 at 13:56
Thank you. i have used this, as sugested with he double quotes. its working perfectly. – Penfold0101 Mar 25 '13 at 15:08

score 2 · Answer 2 · answered Mar 25 '13 at 13:56

2

To add a variable inside a string you use .

include('includes/WL_cart_' . $URL . '.php');

answered Mar 25 '13 at 13:56

Toon Casteele

2,479
15
25

score 0 · Answer 3 · answered Mar 25 '13 at 13:57

Use double quotes " and a $ symbol to pull in your variable.

Also bear in mind that your first variable should also be "quoted":

<?php
    $URL = "p2" ; /* p1, p2, p3 or no can be used here */
?>

<?php include("includes/WL_cart_$URL.php"); // calls the page i need?>

score 0 · Answer 4 · answered Mar 25 '13 at 13:58

0

<?php include("includes/WL_cart_{$URL}.php"); ?>

But you need take care, for example, if $url = '../config/database.php.inc', will open the config file.

answered Mar 25 '13 at 13:58

Bruno Alano

643
1
11
21

so, can this be exploited by evil people of the net?? – Penfold0101 Mar 25 '13 at 14:21

Can i put a PHP variable inside a PHP include?

4 Answers4