The only security consideration here is whether you want to advertise the
fact that you're using PHP or not. If not:

DirectoryIndex index.html

AddType application/x-httpd-php .html

This is OK if most/all your pages use PHP. Otherwise, normal html gets
parsed as well with unnecessary performance costs.

Security through obscurity is not a good standalone policy, but every
little bit can help.

Michael




On Wed, 17 Jul 2002, Mark Gallagher wrote:

> Sailom wrote:
> 
> >   I am a novice on PHP and web programming.  Can any one suggest me if I can
> > use index.php in place of index.html?  I really need to concern about
> 
> Sure you can!
> 
> If you're using an Apache webserver, create a file named .htaccess 
> containing the following:
> 
> DirectoryIndex index.php index.html
> Redirect index.html http://www.bar.net/index.php
> 
> The first line says "the directory index file is index.php, not 
> index.html".  The second line says "whenever you get a request for 
> index.html, send them index.php instead".
> 
> > security issue too.
> 
> Umm... *what*?
> 
> 
> 
> 

-- 
--------------------------------
n   i   n   t   i  .   c   o   m
php-python-perl-mysql-postgresql
--------------------------------
Michael Hall     [EMAIL PROTECTED]
--------------------------------


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to