note 1136 deleted from function.include by vincent
| From: | vincent@php.net | Date: | Mon, 08 Sep 2003 15:10:03 +0000 |
| Subject: | note 1136 deleted from function.include by vincent | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-55844@lists.php.net to get a copy of this message | ||
Note Submitter: rmm@dridus.com
----
Regarding the security issue noted above, if you want nobody to see the contents of your include
files, and you use Apache, you can try stuffing:
Order deny,allow
Deny from all
into your .htaccess file for where your include file are stored (I use projectdir/include). This
also assumes that your Apache setup is configured with AllowOverride all or similar.
This works by virtue of PHP not caring one way or the other about Apache's .htaccess.