note 13155 deleted from function.include by irc-html

This is in regards to using any extensions besides ".php*". Parsing files intended to be included just to hide the source can reveal directory information about your server when errors occur, unless steps are taken to hide those as well. A simpler approach, IF you are using Apache, is use the following directive in your http.conf or in .htaccess files: <filesmatch "\.(inc)$"> AllowOverride None Order deny,allow deny from all </filesmatch> This will deny access to ANYBODY trying to access through direct URL. This can also be used in a virtual hosting environment on a per domain basis. Obviously you can add as many extension as needed.