note 17312 added to security.hiding

Yes, security by obscurity is always debated, but this doesn't mean it has no place in a security policy. The measures described in this chapter - when combined with solid peer code review, both of PHP itself and of your script - go a long way towards making script kiddies unhappy. One more thing one should add is setting "expose_php" to "off" (and generally, using Apache's ServerTokens to reveal as little about the system as possible). -- http://www.php.net/manual/en/security.hiding.php http://master.php.net/manage/user-notes.php?action=edit+17312 http://master.php.net/manage/user-notes.php?action=delete+17312 http://master.php.net/manage/user-notes.php?action=reject+17312