Re: [PHP] Your opinion on security issue: file extension

2001-05-01 Thread Yasuo Ohgaki
I think expose_php = Off is first thing to do instead of changing association. (As well as disabling server signature) extension does not tell much, but expose_php tells PHP version also, if you care about crackers. Crackers will notice you care about security somewhat. It does not protect your

Re: [PHP] Your opinion on security issue: file extension

2001-05-01 Thread Jon Rosenberg
It will tell ou everything about the server, even uptime. So, if they want to know, they can find out, file extensions just make it a bit easier... - Original Message - From: "Johnson, Kirk" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, May 01, 2001 12

[PHP] Your opinion on security issue: file extension

2001-05-01 Thread Johnson, Kirk
I would like opinions on a security question. A co-worker suggested we rename our application files to some extension other than .php (for example, .htm). The reasoning being that the .php extension tells a cracker that we are using PHP, and not ASP, or ColdFusion, etc. The cracker can focus imme