> On Wednesday 03 October 2001 12:13, Jan Grafström wrote:
> > Hi!
> > How does server handle the .inc extension and for what do I use it ?
>
> You should be aware that if the webserver is not set up to handle .inc files
> as PHP code, that it might output them as text to the user. Thus possibly
> showing passwords, usernames and whatnot.

You should set up the web server to block all access to .inc files.  Do
not set them up to be parsed by PHP.  It can be more dangerous to execute
code out of context that to simply display it.

-Rasmus


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to