note 59814 added to security

that's cool, but i use this code right here: <?if(!defined('IN_SCRIPT')){header('HTTP/1.0 404 not found');exit;}?> adding a 404 header will not give the user any clue that the include-file even exists !!! i also protect the whole include-directory with a .htaccess file that says: "Deny from all" so i guess that's pretty secure ---- Manual Page -- http://www.php.net/manual/en/security.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+59814 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+59814&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+59814&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+59814&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+59814&report=yes&reason=useless Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+59814&report=yes&reason=non-english Delete: already in docs -- http://master.php.net/manage/user-notes.php?action=delete+59814&report=yes&reason=already+in+docs Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+59814&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+59814&report=yes Search -- http://master.php.net/manage/user-notes.php