note 45301 deleted from security.hiding by tomsommer

Note Submitter: edsarkiss-at-yahoo-dot-com ---- i see lots of security and sysadmin reasons here for omitting the .php extension -- but nothing yet references user experience as a reason to do this. URLs are your pages' "license plates" that your users see. There is no need for the user to know what CGI/Template/Language/Technology you are using. In fact, all the user should be told is "what i am sending you is HTML (or XML or ...)". Yes, the Content-Type header accomplishes this, but it can be reinforced with the file extension, especially if the user wants to save the page to their local machine. In short, there are reasons in the domains of security, sysadmin, and usability to *not* expose your webserver's underlying technology. Take a few minutes to implement this in your system, and the world will be a better place.