note 14539 deleted from security.php by ronabop
| From: | ronabop@php.net | Date: | Fri, 03 Aug 2001 06:57:41 +0000 |
| Subject: | note 14539 deleted from security.php by ronabop | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-16272@lists.php.net to get a copy of this message | ||
I add this line to .htaccess for some sites:
AddType application/x-httpd-php .asp
That way, I can still write in PHP, but many people will think I'm running IIS (and thus waste
time trying silly MS hacks on the server, assuming they don't bother to read the HTTP headers).
Confuses the heck outta random l33t h4x0rz, and probably that darn "Code Red" worm too.
:-)
Yes, security-through-obscurity isn't sufficient, but if you can get it for free, hey, why not?
You could do that with any random file extension, assuming it's not being used by something
else on your site. Watch the 12-year-olds try to figure out what language your homepage.zkq file is
written in... should be fun.