RE: [PHP] Security/Web tree/db connect and select
| From: | Chris W. Parker | Date: | Tue, 01 Jun 2004 15:29:16 +0000 |
| Subject: | RE: [PHP] Security/Web tree/db connect and select | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-187352@lists.php.net to get a copy of this message | ||
John W. Holmes <mailto:holmes072000@charter.net>
on Tuesday, June 01, 2004 8:29 AM said:
> We'll call that Option 3, which is a viable option if you cannot do
> Option 2 (store outside of webroot). The problems with this method is
> that if PHP ever fails for any reason, the file may be delivered as
> plain text. It can also be run "out of context".
[snip other useful info]
yes this all makes sense. good to know John.
thanks,
chris.