note 45336 added to security

A correction to previous post by Dave Mink. <Files ~ "\.inc$"> Order allow,deny Deny from all Satisfy All </Files> Will not stop something like http://www.yourserver.com/includefile.inc?pointlessvar=blahblah Here is something more sophisticated for this task: <Location ~ "/[^ ](?=\.inc(\?[^ ]*)?)/"> Options None Order Allow, Deny Deny from All AllowOverride None Satisfy All </Location> Also, consider placing in your httpd.conf <Location ~ "/[^ ](?=\.phps(\?[^ ]*)?)/"> Options None Order Allow, Deny Deny from All AllowOverride None Satisfy All </Location> ---- Manual Page -- http://www.php.net/manual/en/security.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+45336 Delete -- http://master.php.net/manage/user-notes.php?action=delete+45336&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+45336&report=yes Search -- http://master.php.net/manage/user-notes.php