Re: I've some doubts if I should go with 5.2 or go already with 5.3 (for a course)
| From: | Per Jessen | Date: | Wed, 24 Jun 2009 16:53:41 +0000 |
| Subject: | Re: I've some doubts if I should go with 5.2 or go already with 5.3 (for a course) | ||
| References: | 1 2 3 4 5 6 7 8 9 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-294534@lists.php.net to get a copy of this message | ||
Robert Cummings wrote:
> Personally, I prefer having my code outside the DocumentRoot
> also, but I do not believe it is the simplest solution, and I do not
> think it is "wrong" to place such information within the DocumentRoot..
> The feature exists, application developers have chosen to use the
> feature, it may be less secure, but it is not wrong.
Are we just discussing semantics then? I agree it's not wrong as such,
but right and wrong are usually determined by the environment one is in
and in a security-aware environment (such as I know them), letting the
webserver write to the DocumentRoot would be wrong. Elsewhere it is
perhaps at worst ill-advised.
/Per
--
Per Jessen, Zürich (11.5°C)