note 14441 deleted from security.php by ronabop

From: Date: Fri, 03 Aug 2001 06:45:12 +0000
Subject: note 14441 deleted from security.php by ronabop
Groups: php.notes 
Request: Send a blank email to php-notes+get-16271@lists.php.net to get a copy of this message
>> Security by obscurity is not really security True, but doesn't every little bit help? If a PHP savvy cracker were to compile a list of potential targets based on the web server signature, this simple modification would help (without sacrificing functionality). >> And since under a normal install php scripts have a .php extension your obscurity would be >> really un-obscure. Good point. You could name your scripts with a .htm extension and configure so that everything is parsed but you must weigh the performance hit against any benefits. I guess what I'm getting at is that obscurity isn't worthless, it's just not enough.

« previous php.notes (#16271) next »