[suspicious - maybe spam] note 50205 added to function.pg-connect
| From: | sigve at wolfraidah dot no | Date: | Mon, 21 Feb 2005 23:04:55 +0000 |
| Subject: | [suspicious - maybe spam] note 50205 added to function.pg-connect | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-85336@lists.php.net to get a copy of this message | ||
Regarding Helio Ferenhof's comment above:
That practice may be extremely dangerous, because (at least) Apache doesn't have any special
handle for *.inc files. When they are included into your PHP-script, it works fine, but if you enter
the filename in a web browser's address field you will get the contents of the file dumped as
cleartext - including the username and password!
This can be remedied by a) renaming the include file to .php, b) adding a .htaccess directive which
hides the .inc-files, or globally handle .inc files with php in apache.conf (not recommended, I
guess).
----
Manual Page -- http://www.php.net/manual/en/function.pg-connect.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+50205
Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+50205&report=yes&reason=added+to+the+manual
Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+50205&report=yes&reason=bad+code
Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+50205&report=yes&reason=spam
Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+50205&report=yes&reason=useless
Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+50205&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+50205&report=yes
Search -- http://master.php.net/manage/user-notes.php