Bug #16039 Updated: File access is not limits by .htaccess for includes

ID: 16039 Updated by: eru@php.net Reported By: mark@fregat.net -Status: Open +Status: Bogus Bug Type: Apache related Operating System: FreeBSD 4.3 PHP Version: 4.1.2 New Comment: This is not a bug. Please double-check the documentation available at http://www.php.net/manual/ and the instructions on how to report a bug at http://bugs.php.net/how-to-report.php When you include a file, it is not processed through the server, but it gets directly opened by PHP. You might want to take a look at the safe-mode. Previous Comments: ------------------------------------------------------------------------ [2002-03-13 07:17:43] mark@fregat.net I have PHP installed as an Apache module. When I try to <? include /aaa/bbb/ccc.xxx ?>, access to /aaa/bbb/ccc.xxx is granted without prompting for the login/password despite the directory /aaa/bbb/ is password-protected by .htaccess To my mind, any attempts of Apache access to .htaccess'ed files should be limited according to .htaccess ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=16039&edit=1