Re: PHP and passwords
| From: | John English | Date: | Wed, 06 Mar 2002 12:47:10 +0000 |
| Subject: | Re: PHP and passwords | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-87449@lists.php.net to get a copy of this message | ||
William Lovaton wrote:
>
> If you use just and .inc file any user with a browser can hit in the
> URL: http://www.site.com/connect.inc and see what is inside.
...unless you keep your include directory outside the web tree (which
is what I always do). That way the files can only be accessed by
an include/require from a PHP script inside the web tree.
-----------------------------------------------------------------
John English | mailto:je@brighton.ac.uk
Senior Lecturer | http://www.it.bton.ac.uk/staff/je
Dept. of Computing | ** NON-PROFIT CD FOR CS STUDENTS **
University of Brighton | -- see http://burks.bton.ac.uk
-----------------------------------------------------------------