Re: Hiding .inc
| From: | Anang Syarifudin | Date: | Wed, 30 Aug 2000 03:10:03 +0000 |
| Subject: | Re: Hiding .inc | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-14294@lists.php.net to get a copy of this message | ||
> We're setting up a site on a virtual server that includes data we want to
be
> secure in .inc files.
> What is the best way to keep these files from being able to be accessed by
> people who might be looking for security holes?
>
I use this way, no need to touch apache conf :
alternative 1:
name it "*_inc.php" not "*.inc"
altenative 2:
store it on inaccessible directory/out of server root, so if you have
/home/httpd/html, then create directory /home/httpd/inc, you can access
it by
include "../inc/whatever.inc";
Anang