[suspicious - maybe spam] note 50205 added to function.pg-connect

From: Date: Mon, 21 Feb 2005 23:04:55 +0000
Subject: [suspicious - maybe spam] note 50205 added to function.pg-connect
Groups: php.notes 
Request: Send a blank email to php-notes+get-85336@lists.php.net to get a copy of this message
Regarding Helio Ferenhof's comment above: That practice may be extremely dangerous, because (at least) Apache doesn't have any special handle for *.inc files. When they are included into your PHP-script, it works fine, but if you enter the filename in a web browser's address field you will get the contents of the file dumped as cleartext - including the username and password! This can be remedied by a) renaming the include file to .php, b) adding a .htaccess directive which hides the .inc-files, or globally handle .inc files with php in apache.conf (not recommended, I guess). ---- Manual Page -- http://www.php.net/manual/en/function.pg-connect.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+50205 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+50205&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+50205&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+50205&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+50205&report=yes&reason=useless Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+50205&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+50205&report=yes Search -- http://master.php.net/manage/user-notes.php

« previous php.notes (#85336) next »