Re: Protecting files

I wonder though, if they're on a the same server but different sites. Like a shared host environment. Aw the things the bewilder the mind. Nate "Bryan Lipscy" <x427279616e@monroe.net> wrote in message news:000001c2d710$81a68e20$6301a8c0@ukiuki... > That is called Cross-Site Scripting (XSS). > I have not been able to get access to the variables via an XSS exploit. > It appears that Apache renders the php code before sending off the > requesting include function. > > I also like the .htaccess way of preventing user access to the scripts. > This is also worthy of further investigation. > > Bryan >