Re: [PHP] Protecting include files

[Tom Carter]

In addition to this you can place the file out of the web tree PHP can,
AFAIK, include files based on their absolute file path, eg /home/config.inc.
This means that there is no way to directly browse to a file

(web tree is the part of a server/whatever that the webserver (eg apache)
uses to load files when requested to)

 Hi,

 I have a php script which includes .inc files. Is there any way in which I
 can prevent a normal surferfrom viewing these files. Is there any command
 that I can add to a .htaccess file.

 Thanks

   ~~~  \\__
 ! SIDDHARTH HEGDE /   CHAOSGAMERZ.COM !
 !  Webmaster  \  For PC Game screeshots, cheat!
 !   http://www.ChaosGamerz.COM o| o  codes, trainers, downloads,  !
 ![EMAIL PROTECTED]( |_   game music, FREE e-mail and even !
 ! ICQ 84475206 |--   FREE FULL VERSION games for that !
 ~~ \___/ 486--


 --
 PHP General Mailing List (http://www.php.net/)
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 To contact the list administrators, e-mail: [EMAIL PROTECTED]



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] Protecting include files

[Sid]

Hi,

I have a php script which includes .inc files. Is there any way in which I 
can prevent a normal surferfrom viewing these files. Is there any command 
that I can add to a .htaccess file.

Thanks

  ~~~  \\__
! SIDDHARTH HEGDE /   CHAOSGAMERZ.COM !
!  Webmaster  \  For PC Game screeshots, cheat!
!   http://www.ChaosGamerz.COM o| o  codes, trainers, downloads,  !
![EMAIL PROTECTED]( |_   game music, FREE e-mail and even !
! ICQ 84475206 |--   FREE FULL VERSION games for that !
~~ \___/ 486--


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] Protecting include files

[Rasmus Lerdorf]

Files ~ \.inc$
Order allow,deny
Deny from all
/Files

On Mon, 14 Aug 2000, Sid wrote:

 Hi,

 I have a php script which includes .inc files. Is there any way in which I
 can prevent a normal surferfrom viewing these files. Is there any command
 that I can add to a .htaccess file.

 Thanks

   ~~~  \\__
 ! SIDDHARTH HEGDE /   CHAOSGAMERZ.COM !
 !  Webmaster  \  For PC Game screeshots, cheat!
 !   http://www.ChaosGamerz.COM o| o  codes, trainers, downloads,  !
 ![EMAIL PROTECTED]( |_   game music, FREE e-mail and even !
 ! ICQ 84475206 |--   FREE FULL VERSION games for that !
 ~~ \___/ 486--





-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] Protecting include files

[John Meyer]

At 08:26 PM 8/18/01 -0700, Rasmus Lerdorf wrote:
Files ~ \.inc$
 Order allow,deny
 Deny from all


BTW, .inc files can include PHP code that is executed, right?


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] Protecting include files

[Dan Lowe]

Previously, John Meyer said:

 BTW, .inc files can include PHP code that is executed, right?

Any file can contain such code, if the server is configured to interpret
the file as a PHP file, or if another file which is PHP include()'s the
file in question.  The .inc extension just happens to be a popular choice
that a lot of people tend to use for included PHP code.  But typically as
far as the server cares they're just text files.

 -dan

-- 
It's been said that a million monkeys at a million keyboards could produce
the complete works of Shakespeare; now thanks to the Internet, we can say
that this is not true.   -Unknown

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]