Re: Hiding .inc
| From: | Rasmus Lerdorf | Date: | Wed, 30 Aug 2000 02:51:48 +0000 |
| Subject: | Re: Hiding .inc | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-14290@lists.php.net to get a copy of this message | ||
> We're setting up a site on a virtual server that includes data we want to be
> secure in .inc files.
> What is the best way to keep these files from being able to be accessed by
> people who might be looking for security holes?
I use this on a site where I want to hide all .inc files in the top-level
/ directory. I want to allow displaying them in lower-level dirs:
<LocationMatch "^/[^/]*.inc">
Order allow,deny
Deny from all
</LocationMatch>
Just stick this, or a variation of this, in your httpd.conf file.
-Rasmus