Re: prevent user from getting scripts outside the web folder
| From: | Chris Shiflett | Date: | Sat, 15 Oct 2005 10:04:48 +0000 |
| Subject: | Re: prevent user from getting scripts outside the web folder | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-224179@lists.php.net to get a copy of this message | ||
Graham Anderson wrote:
my htaccess file for the folder containing the php script was not set properlyWhat does that mean? Are you telling us that /home/siren/includes/ is within document root? If it's not, do you link to it from within document root? Do not store includes within document root. Using .htaccess can prevent the direct access, but you're still taking an unnecessary risk. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/