On Sat, 2002-08-31 at 06:20, David Kramer wrote: > > .inc files are supposed to be included into .php files, not served > directly. This is dangerous, as more comples PHP applications often have > private information in them about the system they run on.
...Which brings up this point, too: any files, php or otherwise, which contain sensitive information (SQL passwords, etc) are best stored outside of the HTTP root, where no URL can get them, and only used as includes. -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list