On Mon, 13 May 2002, Dennis Gearon wrote: > CSS sheets have to be in the document root somewhere, don't they? > > I'm trying to move as much, or at least what I consider security > related, from the phpnuke in the document root to a directory outside of > the document root.
If you're linking to them with HTML then they need to be somewhere the browser can get at them. If you're include()ing them directly into your HTML as you send it, then they can be anywhere in your filesystem that PHP has read access to. It escapes me, however, why read access to stylesheets would have even the remotest security implications, since they are useless unless sent to the browser anyway. miguel -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
