Re: Sugest
| From: | Arvids Godjuks | Date: | Fri, 14 May 2010 15:21:57 +0000 |
| Subject: | Re: Sugest | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-48295@lists.php.net to get a copy of this message | ||
2010/5/14 Mathias Grimm <mathiasgrimm@gmail.com>:
>>
>> > 2010/5/14 Johannes Schlüter <johannes@schlueters.de>
>> > > <?php
>> > > require
>> ....
There is one thing you don't take into account.
Make an index.php and all other files .inc. Than add to web servers
configuration a deny rule for *.inc . Suddenly you improved your
security dramatically because there is only one access point for the
whole project. I use this 100% every time.