Of course the absolute safest way besides encryting
your PHP is to just store your state secrets in files
outside the web server's document tree.
i.e.
if your web server's document root is /var/www
<?php
require("/var/super-secret/super-functions.php");
if ($theanswer == 42)
{
echo (findthequestion($theanwer));
}
?>
then even if you screw up the web server config
and .php files are sent back unrendered all you
expose is what's in the file above but not what was
included/required statements.
This is an excellent way to protect sensitive info
like database passwords too.
-Ironstorm
Northern.CA ===--
http://www.northern.ca
Canada's Search Engine
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]
