how to to include a file from main domain to subdomain

Question

want to include a file from main domain to subdomain

index.php - on subdomain.example.com

ini_set("allow_url_fopen", 1);
ini_set("allow_url_include", 1);    
$host = $_SERVER['HTTP_HOST'];
if($host == 'localhost'){include("../navt.php");}
else{include("https://example.com/navt.php");}

on localhost - there is no problem (win 10, xampp, chrome)
on remote server - I'm still getting this:
include(): https:// wrapper is disabled in the server configuration by allow_url_include=0

The error indicates to me that your hosting provider overrides the INI setting you used — hppycoder, Mar 29 '21 at 16:31
Why not just copy paste the file into the subdomain's directory? — nice_dev, Mar 29 '21 at 16:32
You could also do `else { echo file_get_contents("https://example.com/navt.php"); }` instead — hppycoder, Mar 29 '21 at 16:32
@nice_dev - duable but the price is very expensive in case you need to change something in `navt.php` — qadenza, Mar 29 '21 at 16:43
@qadenza Does this act like an API returning some JSON, or is like a usual file you want to include in your script? — nice_dev, Mar 29 '21 at 16:44
Also, are you hosting them all(9 subdomains) on a single server? If yes, then of course, you can just have a single directory outside of public_html. — nice_dev, Mar 29 '21 at 17:02
@qadenza No need to be rude to people who invest time in helping you. Looking at your comment, am I missing something? — nice_dev, Mar 29 '21 at 17:03
Saving as .html was from a security perspective as it is a bit less vulnerable than .php file as it is an executable code. Also, if all are on same server, import the file from disk, because fetching from a url opens up for phishing attacks. — nice_dev, Mar 29 '21 at 17:23

IMSoP · Accepted Answer · 2021-03-29T16:44:17.850

1

The documentation for the allow_url_include setting includes two important details:

It is changeable at "PHP_INI_SYSTEM" level only, which is explained elsewhere in the manual. It cannot be set at run-time, nor by individual users on a shared server.
It is deprecated since PHP 7.4.

Both of these are for the same reason: this setting is extremely dangerous. It's highly advisable to come up with an alternative solution to your problem, by thinking about how you deploy your code. For instance:

Put the files that need to be shared between the different sub-domains somewhere on disk, and reference those files with a normal (non-URL) include.
Create a shared library that you can deploy to all the sub-domains at once.
Use the same application for all the sub-domains, with code to detect which one is being displayed.

edited Mar 29 '21 at 16:44

answered Mar 29 '21 at 16:34

IMSoP

89,526
13
117
169

thanks a lot. how to make a folder to be `shared`. If I put `navt.php` inside that folder I still need to use `include()` - from main domain url – qadenza Mar 29 '21 at 16:40
@qadenza By "shared" I just mean "use the same ones"; how that looks depends on how you structure your code. The point is that you need to think about _files on the server_, not URLs. – IMSoP Mar 29 '21 at 16:42

how to to include a file from main domain to subdomain

1 Answers1