Includes in your document root (was: Re: [PHP] MsSQL PASSWORD())
| From: | bvr | Date: | Tue, 12 Feb 2002 00:32:39 +0000 |
| Subject: | Includes in your document root (was: Re: [PHP] MsSQL PASSWORD()) | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-84330@lists.php.net to get a copy of this message | ||
In that case, forget what I said ';)
But since you can't say this enough, here is it once more:
*** Always remember to keep those includes *out of* your document root;
This prevents accidental displaying of source code or
(which I heard on this list could even be worse) out-of-context execution.
bvr.
On Tue, 12 Feb 2002 10:09:38 +1000, Liam MacKenzie wrote:
>I think by saying "under" the webserver root, he means any directory below
>it. For instance, if you webserver root was /www/root, put it here: /www