Re: how to hide dbconnect file if its in published directo

> On 14-Jul-01 hassan el forkani wrote: > > there should not be any problem if your web server is configured to parse > > .inc extentions as PHP, in wich case, even if the file is called > > separately, the server will strip php tags and send normal html output. > > > > Enough already. > Whom should we flog and keel-haul for starting this include(foo.inc) crap ?!? There is nothing wrong with naming include files with a separate extension. In fact it is more secure as long as you block access to files with that extension. Naming your include files with the .php extension opens you up to possible out-of-context parsing security issues. -Rasmus