On Mon, 13 May 2002, Dennis Gearon wrote:
> CSS sheets have to be in the document root somewhere, don't they?
> I'm trying to move as much, or at least what I consider security
> related, from the phpnuke in the document root to a directory outside of
> the document root.

If you're linking to them with HTML then they need to be somewhere the
browser can get at them. If you're include()ing them directly into your
HTML as you send it, then they can be anywhere in your filesystem that PHP
has read access to.

It escapes me, however, why read access to stylesheets would have even the 
remotest security implications, since they are useless unless sent to the 
browser anyway.


PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to