RE: [PHP] how do i hide my .inc files in apache??
| From: | Jon Niola | Date: | Wed, 17 Jan 2001 20:14:30 +0000 |
| Subject: | RE: [PHP] how do i hide my .inc files in apache?? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-35134@lists.php.net to get a copy of this message | ||
I could be mistaken here, but last I checked you could include files outside of the document root. Can't get much more secure then that and you don't have to mess with the Apache rewrite engine, which is known for slowing things down.
--Jon
At 02:02 PM 1/17/01 +0000, Matt Williams wrote:
<Files *.inc>
Order allow,deny
Deny from all
</Files>
in either your httpd.conf or a .htaccess file will deny users access to your
*.inc files
M@
-----Original Message-----
From: Jon Haworth [mailto:JHaworth@witanjardine.co.uk]
Sent: 17 January 2001 13:01
To: 'Jamie Burns'
Cc: 'php-general@lists.php.net'
Subject: RE: [PHP] how do i hide my .inc files in apache??
I take it you're talking about normal html .inc files, and not the PHP
include() function? If so, this is well off-list, try the
comp.infosystems.www.servers heirarchy for this sort of thing.
But...
You can't, AFAIK. The whole *point* of an include file is that the entire
contents of that file are included in whatever document you call it from.
You use them for holding repetitive information that you don't
want to type
out for every page, such as a footer, eg:
<p>This page is copyright blah blah blah</p>
<p><a href="mailto:webmaster@mydomain.com">E-mail the webmaster</a></p>
would be a candidate for a .inc file.
If I have completely missed the point, please forgive me.
Cheers
Jon
-----Original Message-----
From: Jamie Burns [mailto:jamie.burns@dynamicexpression.co.uk]
Sent: 17 January 2001 12:48
To: php-general@lists.php.net
Subject: [PHP] how do i hide my .inc files in apache??
hi..
can anyone tell me how i get apache to never send out the contents of my
include files (*.inc) to users?
i dont want my source sode to be visible to browsers.
thanks,
jamie.
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
For additional commands, e-mail: php-general-help@lists.php.net
To contact the list administrators, e-mail: php-list-admin@lists.php.net
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
For additional commands, e-mail: php-general-help@lists.php.net
To contact the list administrators, e-mail: php-list-admin@lists.php.net