Re: [PHP] Web Site Security Hole

2005-04-07 Thread Brent Baisley
If properly designed, it shouldn't really matter if someone sees your code. Everyone can see the source code for Linux and lots of other systems you may be using (MySQL, PHP, etc.), but they are considered fairly secure. Knowing your methodology will only help someone in finding security holes

Re: [PHP] Web Site Security Hole

2005-04-07 Thread Duncan Hill
On Thursday 07 April 2005 14:55, Don typed: > I was feeling pretty secure until a friend reminded me you can download > complete sites by importing them with such tools as FrontPage and > Dreamweaver. That way, the "protection" provided by the PHP server is > non-existant. This is only possible in

[PHP] Web Site Security Hole

2005-04-07 Thread Don
Hi, I'm developing a small web site that does a bit of e-commerce (that is, it creates security keys and such). I've been very careful to keep all constants used in calculations in a local directory above docroot, but all of my main .php pages are in (or under) docroot (my host won't allow .ph