Re: how to hide dbconnect file if its in publisheddirectory?
| From: | John Weaver | Date: | Tue, 10 Jul 2001 07:16:13 +0000 |
| Subject: | Re: how to hide dbconnect file if its in publisheddirectory? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-57094@lists.php.net to get a copy of this message | ||
On Tuesday 10 July 1979 12:55 am, zerosumzero@yahoo.com wrote:
> on 7/10/01 1:01 AM, Navid A. Yar at NavidYar2@home.com wrote:
> > Hmmm, I was wondering about security of PHP also. Does anyone know the
> > general issues of security within PHP documents? My thought is that PHP
> > cannot be seen when you view a source anyway, so isn't it secure enough
> > (besides the basic firewall and system security)?
>
> If you have some function in a file called say ... functions.inc
>
> you can see the php script if you call functions.inc from a browser...
>
> because the server won't do the php code in an inc file...
>
> how do I change this!?
Name the file ... functions.inc.php and insure that you have the php start
and end tags on it.
--
Regards,
John Weaver