note 3990 deleted from include by ronabop
| From: | ronabop@php.net | Date: | Fri, 29 Sep 2000 18:24:29 +0000 |
| Subject: | note 3990 deleted from include by ronabop | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-5624@lists.php.net to get a copy of this message | ||
I ran into a security issue where web users were able to just download the .inc files and while
doing that, their sourcecode with ofcourse passwords... My solution for this problem (without having
to create .htaccess files) is adding the .inc extension to "AddType application/x-httpd-php3
.php3" in the appache httpd.conf file. Or if you can't edit the httpd.conf: just give your
include files the same extension as your normal php files.