note 33999 deleted from function.mysql-connect by bjori
| From: | bjori@php.net | Date: | Sat, 15 Apr 2006 18:29:52 +0000 |
| Subject: | note 33999 deleted from function.mysql-connect by bjori | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-108178@lists.php.net to get a copy of this message | ||
Note Submitter: AlbieNoSp4m at hotmail dot com
----
Just a small follow up, but a small error in someones post, regarding security of .inc files.
the ~ ".inc" is actually a regular expression, this expresion would match anything with
inc in it, ex: wince.php, prince.html, etc.
The correct expression would be:
<Files ~ "\.inc(.php)?$">
Order allow,deny
Deny from all
Satisfy All
</Files>
This makes it so, all your .inc or .inc.php files are not readable.
QUOTE:
So, just add the following chunk of text to your httpd.conf file:
<Files ~ ".inc">
Order allow,deny
Deny from all
Satisfy All
</Files>
--
Andy Calderbank