Hey Guys,

I want my php code to run with the file type extension of .jpg.

By this i mean I save my php script with a jpg extension.

I have added this code to my .htaccess file

<Files spacer.jpg>
ForceType application/x-httpd-php
</Files>

But it didn't work. Is the code right? I wonder if my host could be blocking this perhaps?

Any help would be greatly appreciated.

Thanks,

G

This sort of thing is usually used for hacking websites, I don't think you should be looking into such things

AddType

Google it to get the answer.

Here's something I often use, just throw it in the .php file you want to act like a .jpg.

PHP Code:

<?php header('Content-Type: image/jpeg'); ?>

I don't know if it will work in your specific case, though.

Originally Posted by alex021

This sort of thing is usually used for hacking websites, I don't think you should be looking into such things

Thanks for chiming in but I think you don't know what you are talking about.

Originally Posted by Guerrilla

Thanks for chiming in but I think you don't know what you are talking about.

Trust me I do as one of my websites was hacked this way the php code in jpg file and htaccess file was used to run it and append virus to each page

Originally Posted by alex021

Trust me I do as one of my websites was hacked this way the php code in jpg file and htaccess file was used to run it and append virus to each page

Your site must have aready been compromised if they were able to upload their own .htaccess file.

Originally Posted by alex021

Trust me I do as one of my websites was hacked this way the php code in jpg file and htaccess file was used to run it and append virus to each page

Sounds like a permissions problem, not anything do do with .jpg being used for PHP. Any file format could have been used, .jpg was just a convenient hiding place. Almost all hacks like this come from someone else on your shared server, so if your file or directory permissions are not strict enough, it is possible for others to change your directories or even upload and change files.

If I were you, I'd redirect my jpg requests to a php script, rather than trying to get apache to interpret jpg files as php.

A simple way to achieve what you desire is to use a directory.

Make a directory image.jpg and inside it, have your index.php generate the image

For example:
http://www.fakeexamplesite.com/image.jpg/index.php

could be used in html as http://www.fakeexamplesite.com/image.jpg

The index.php needs to send image headers and return an image, im assuming you know how to do that as you only asked the question about executing php scripts with the jpg extension

edit: This is all assuming you want to actually return an image, not ust have your regular php scripts named .jpg, in which case ignore this post

No, none of you are understanding his question or providing the correct/easiest answer. The "real" solution can be used for easy hacking/spreading malware so I'm not going to post it but its a single line in a .htaccess file.

what about html to php

my problem is when i do it I end up changing every .jpg file to run as php. I just want to make it happen for 1 file or 1 directory.

Originally Posted by Guerrilla

my problem is when i do it I end up changing every .jpg file to run as php. I just want to make it happen for 1 file or 1 directory.

Place the .htaccess only in that directory. Only that directory and the children ones will be affected.

Then be sure no one else can upload to that directory.

Yes, but your still failing to tell him how this can be done. Its done with the .htacces code from one of my earlier post. The reason as to why I didn't post the entire code is because this can be used to hack user's machines.

Well, can you at least replace the in-secure parts of the script as var1, var2, var3 instead of the actual things? This may better help us understand exactly what you are looking for.

Originally Posted by Decaf

Yes, but your still failing to tell him how this can be done. Its done with the .htacces code from one of my earlier post. The reason as to why I didn't post the entire code is because this can be used to hack user's machines.

His latest post implied that he knew how to do it sitewide and I chose to tell him how to do it in one directory.

Like you I think doing it very risky and have no desire for some newbie to screw up a server using what I post.