note 97479 deleted from function.exit by danbrown

Note Submitter: Reclaim the Doc-Root! ---- @albert and @jbezorg: (and other inexperienced php.net readers) I consider "checking included files for execution" a bad practice. If you have files that you don't want accessible to web users, don't stick those files in your web-server's document root. If for some reason you can't place documents outside your doc-root, at least put those files in an "include only" directory (and deny access to all web-browsers). Regardless, as @albert says, you do need an "exit()" after every "header('Location: ...')".