Re: [PHP] Protecting include files

2001-08-19 Thread Tom Carter
In addition to this you can place the file out of the web tree PHP can, AFAIK, include files based on their absolute file path, eg /home/config.inc. This means that there is no way to directly browse to a file (web tree is the part of a server/whatever that the webserver (eg apache) uses to l

Re: [PHP] Protecting include files

2001-08-18 Thread Dan Lowe
Previously, John Meyer said: > > BTW, .inc files can include PHP code that is executed, right? Any file can contain such code, if the server is configured to interpret the file as a PHP file, or if another file which is PHP include()'s the file in question. The ".inc" extension just happens to b

Re: [PHP] Protecting include files

2001-08-18 Thread John Meyer
At 08:26 PM 8/18/01 -0700, Rasmus Lerdorf wrote: > > Order allow,deny > Deny from all BTW, .inc files can include PHP code that is executed, right? -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTE

Re: [PHP] Protecting include files

2001-08-18 Thread Rasmus Lerdorf
Order allow,deny Deny from all On Mon, 14 Aug 2000, Sid wrote: > Hi, > > I have a php script which includes .inc files. Is there any way in which I > can prevent a normal surferfrom viewing these files. Is there any command > that I can add to a .htaccess file. > > Thanks > > ~~~