note 16837 deleted from function.show-source by jimw
| From: | jimw@php.net | Date: | Fri, 07 Dec 2001 02:32:27 +0000 |
| Subject: | note 16837 deleted from function.show-source by jimw | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-21838@lists.php.net to get a copy of this message | ||
In regards to the note suggesting that passwords be put into a seperate *.inc file and then
require()'d, instead of using *.inc, use the name *.inc.php
This makes the php engine process the page as a php doc, therefore hiding any code in it...
otherwise, if the file is readable, any user can just load up the *.inc as text, and get the
passwords that way :)