Re: [PHP4BETA] PHP.INI -> PHP.PHP should we rename?
| From: | Evan Klinger | Date: | Fri, 17 Mar 2000 05:16:51 +0000 |
| Subject: | Re: [PHP4BETA] PHP.INI -> PHP.PHP should we rename? | ||
| References: | 1 | Groups: | php.version4 |
| Request: | Send a blank email to php-version4+get-12303@lists.php.net to get a copy of this message | ||
admin wrote:
>
> It struck me that with the ini file in the root of a users web site it
> might be advisable to provide some protection from hackers. By giving
> it the name of a script it would be possible to prepend/append
> sufficient code to display a naughty-naughty message but not expose the
> contents as a text file.
The php.ini file should not even be in the web server's document root.
You can use the --with-config-file-path configuration option to PHP to
change the directory location of the php.ini file.
--
ev
----------------------------
Evan Klinger evan@php.net
AIM evan715