Re: [PHP] Protecing files

2005-08-30 Thread Rory Browne
gt; From: Rory Browne [mailto:[EMAIL PROTECTED] > Sent: 29 August 2005 07:59 PM > To: Thomas > Cc: php-general@lists.php.net > Subject: Re: [PHP] Protecing files > > Personally I reckon that you should simply place them outside the webroot. > > If you are either too l

Re: [PHP] Protecing files

2005-08-29 Thread Jasper Bryant-Greene
Thomas wrote: Thanks for all the answers. I had not considered leaving the xml file outside the webroot (duh!). However, in this case I don't think it would work, as the project is working through a svn structure (and some boxes run Linux, otherwise Win). I thought that the .htaccess would have b

RE: [PHP] Protecing files

2005-08-29 Thread Thomas
who may or may not like to do that)? From that question, .htaccess files seemm the most portable solution. Thanks again. t -Original Message- From: Rory Browne [mailto:[EMAIL PROTECTED] Sent: 29 August 2005 07:59 PM To: Thomas Cc: php-general@lists.php.net Subject: Re: [PHP] Prote

Re: [PHP] Protecing files

2005-08-29 Thread Rory Browne
Personally I reckon that you should simply place them outside the webroot. If you are either too lazy to do this, or too paranoid for this alone, then you could consider renaming them from filename.xml to .ht_filename.xml. There is a section in most default apache config files to make filenames be

Re: [PHP] Protecing files

2005-08-29 Thread John Nichel
Thomas wrote: Hi there, How can I protect all files with extension .xml from being accessed by the outside? For Apache can one use .htaccess (if yes, how?), is there a generic way of keeping stalkers from viewing your config files? You can put them outside of the web root, or you can use .

RE: [PHP] Protecing files

2005-08-29 Thread Jay Blanchard
[snip] How can I protect all files with extension .xml from being accessed by the outside? For Apache can one use .htaccess (if yes, how?), is there a generic way of keeping stalkers from viewing your config files? [/snip] You can put them outside of the web root so that they are not accessible to