El Domingo, 11 de Febrero de 2007, Steve Langasek escribió: > > That is not possible with PHP web apps since PHP needs all the config > > files in the public dir of the web server. This is the issue that sucks. > > No, it doesn't. I don't know where you got that idea.
Yes, it's possible to have config files out of the public dir, but the fact is that many PHP apps contain their config files into the public dir (as Dokuwiki, PhpMyAdmin and so). What I mean is that PHP doesn't force the developer to protect the config files, it's "optional" and many times using relative security as .htaccess files.