Re: [PHP] File extension inc?
Use the '.inc' extension only for files that are not directly accessible to the client. For example, database configuration files do not need to be php and you can mark them as '.inc' for increased code legibility. AFAIK a client's request to one of these files won't be served at all. D. Alvarez Arribas [EMAIL PROTECTED] -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
Re: [PHP] File extension inc?
On Wednesday 03 October 2001 12:13, Jan Grafström wrote: Hi! How does server handle the .inc extension and for what do I use it ? You should be aware that if the webserver is not set up to handle .inc files as PHP code, that it might output them as text to the user. Thus possibly showing passwords, usernames and whatnot. Alexander -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
Re: [PHP] File extension inc?
On Wednesday 03 October 2001 12:13, Jan Grafström wrote: Hi! How does server handle the .inc extension and for what do I use it ? You should be aware that if the webserver is not set up to handle .inc files as PHP code, that it might output them as text to the user. Thus possibly showing passwords, usernames and whatnot. You should set up the web server to block all access to .inc files. Do not set them up to be parsed by PHP. It can be more dangerous to execute code out of context that to simply display it. -Rasmus -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
RE: [PHP] File extension inc?
Even better use mod_rewrite so that .inc files are never displayed :-) Jeremy Allen elliptIQ Inc. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
RE: [PHP] File extension inc?
Even better use mod_rewrite so that .inc files are never displayed :-) mod_rewrite is severe overkill for this. Just use: Files ~ \.inc$ Order allow,deny Deny from all /Files -Rasmus -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
Re: [PHP] File extension inc?
Remembering, of course, to check and make sure your include statements are of the form include(/path/file.inc) rather than include(http://mysite.com/path/file.inc;) BEFORE adding the below directive (one mistake I won't ever make again =P ) Sheridan Saint-Michel Website Administrator FoxJet, an ITW Company www.foxjet.com - Original Message - From: Rasmus Lerdorf [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Wednesday, October 03, 2001 1:59 PM Subject: RE: [PHP] File extension inc? Even better use mod_rewrite so that .inc files are never displayed :-) mod_rewrite is severe overkill for this. Just use: Files ~ \.inc$ Order allow,deny Deny from all /Files -Rasmus -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED] -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
