note 14441 deleted from security.php by ronabop
| From: | ronabop@php.net | Date: | Fri, 03 Aug 2001 06:45:12 +0000 |
| Subject: | note 14441 deleted from security.php by ronabop | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-16271@lists.php.net to get a copy of this message | ||
>> Security by obscurity is not really security
True, but doesn't every little bit help? If a PHP savvy cracker were to compile a list of
potential targets based on the web server signature, this simple modification would help (without
sacrificing functionality).
>> And since under a normal install php scripts have a .php extension your obscurity would be
>> really un-obscure.
Good point. You could name your scripts with a .htm extension and configure so that everything is
parsed but you must weigh the performance hit against any benefits.
I guess what I'm getting at is that obscurity isn't worthless, it's just not enough.