Re: [PHP] .inc location security

2001-04-24 Thread Avetis Avagyan
You can consider also Order allow,deny Deny from all sections are processed in the order they appear in the configuration file, after the sections and .htaccess files are read, but before sections. Note that can be nested inside sections to restrict the portion of the filesystem t

Re: [PHP] .inc location security

2001-04-24 Thread Rasmus Lerdorf
> I tried to do the deny *.inc but doing so just made it so the browser can't > even include them. So that won't do the trick. Uh, what? Aren't these .inc files included by PHP scripts? PHP has no way of knowing whether you are denying access to them from the httpd.conf level with a proper deny