note 30197 added to security.apache

@pollux: additionally, tell your users to set their file-permissions to - r-- (group) for files - --x (group) for directories. this disables the webserver to browse user's directory. if you don't know the filename, you cannot open it, e.g. by running malicious php-code through one of the users scripts. -- http://www.php.net/manual/en/security.apache.php http://master.php.net/manage/user-notes.php?action=edit+30197 http://master.php.net/manage/user-notes.php?action=delete+30197 http://master.php.net/manage/user-notes.php?action=reject+30197