Re: securing an 'includes' dir
| From: | Jason Wong | Date: | Fri, 28 Jun 2002 09:24:20 +0000 |
| Subject: | Re: securing an 'includes' dir | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-104282@lists.php.net to get a copy of this message | ||
On Friday 28 June 2002 16:40, Nick Wilson wrote:
> * and then Jason Wong declared....
>
> > If using Apache, you would set a directive to deny all access to that
> > directory.
>
> Gotcha. Can you domonstrate?
<Directory "/path/to/directory/to/deny/access">
Deny from All
</Directory>
Remember this is only safe from browsers. PHP itself can still access those
files.
Combining this with all the other suggestions would make it pretty secure.
--
Jason Wong -> Gremlins Associates -> www.gremlins.com.hk
Open Source Software Systems Integrators
* Web Design & Hosting * Internet & Intranet Applications Development *
/*
The trouble with doing something right the first time is that nobody
appreciates how difficult it was.
*/