I could be mistaken here, but last I checked you could include files
outside of the document root. Can't get much more secure then that and you
don't have to mess with the Apache rewrite engine, which is known for
slowing things down.
--Jon
At 02:02 PM 1/17/01 +0000, Matt Williams wrote:
><Files *.inc>
> Order allow,deny
> Deny from all
></Files>
>
>in either your httpd.conf or a .htaccess file will deny users access to your
>*.inc files
>
>M@
>
> > -----Original Message-----
> > From: Jon Haworth [mailto:[EMAIL PROTECTED]]
> > Sent: 17 January 2001 13:01
> > To: 'Jamie Burns'
> > Cc: '[EMAIL PROTECTED]'
> > Subject: RE: [PHP] how do i hide my .inc files in apache??
> >
> >
> > I take it you're talking about normal html .inc files, and not the PHP
> > include() function? If so, this is well off-list, try the
> > comp.infosystems.www.servers heirarchy for this sort of thing.
> >
> > But...
> >
> > You can't, AFAIK. The whole *point* of an include file is that the entire
> > contents of that file are included in whatever document you call it from.
> > You use them for holding repetitive information that you don't
> > want to type
> > out for every page, such as a footer, eg:
> >
> > <p>This page is copyright blah blah blah</p>
> > <p><a href="mailto:[EMAIL PROTECTED]">E-mail the webmaster</a></p>
> >
> > would be a candidate for a .inc file.
> >
> > If I have completely missed the point, please forgive me.
> >
> >
> > Cheers
> > Jon
> >
> >
> > -----Original Message-----
> > From: Jamie Burns [mailto:[EMAIL PROTECTED]]
> > Sent: 17 January 2001 12:48
> > To: [EMAIL PROTECTED]
> > Subject: [PHP] how do i hide my .inc files in apache??
> >
> >
> > hi..
> >
> > can anyone tell me how i get apache to never send out the contents of my
> > include files (*.inc) to users?
> >
> > i dont want my source sode to be visible to browsers.
> >
> > thanks,
> >
> > jamie.
> >
> > --
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> > To contact the list administrators, e-mail: [EMAIL PROTECTED]
> >
>
>
>--
>PHP General Mailing List (http://www.php.net/)
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]
>To contact the list administrators, e-mail: [EMAIL PROTECTED]
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]
