Hello John,
If you already did .inc files and the ARE in the document_root of your
filesystem tree and you find it boring to change everything, it's a
good practice to have a .htaccess file shipped with your application
with something like
<Files "*.inc">
Order allow,deny
Deny from all
</Files>
in it.
The only thing you should worry about in this case is that the
webserver will actually take the .htaccess from your document_root
into account.
Monday, May 15, 2006, 11:07:57 PM, you wrote:
JM> Hi,
JM> First off i'm not a PHP programmer but I would like to
JM> know the following:
JM> Is it standard to use INC files to store MYSQL db
JM> connections settings (username and password)?
JM> What else could you do to make this "safer" ?
JM> I presume Apache looks for files with extention
JM> "*.INC" and does not processes them, right ?
JM> Thanks you
JM> __________________________________________________
JM> Do You Yahoo!?
JM> Tired of spam? Yahoo! Mail has the best spam protection around
JM> http://mail.yahoo.com
JM> -------------------------------------------------------------------------
JM> Sponsored by: Watchfire
JM> Watchfire named worldwide market share leader in web application security
JM> assessment by leading market research firm. Watchfire's AppScan is the
JM> industry's first and leading web application security testing suite, and
JM> the only solution to provide comprehensive remediation tasks at every
JM> level of the application. See for yourself.
JM> Download a Free Trial of AppScan 6.0 today!
JM> https://www.watchfire.com/securearea/appscansix.aspx?id=701300000007t9c
JM> --------------------------------------------------------------------------
--
Best regards,
Ed mailto:stealth@arminco.com
-------------------------------------------------------------------------
Sponsored by: Watchfire
Watchfire named worldwide market share leader in web application security
assessment by leading market research firm. Watchfire's AppScan is the
industry's first and leading web application security testing suite, and
the only solution to provide comprehensive remediation tasks at every
level of the application. See for yourself.
Download a Free Trial of AppScan 6.0 today!
https://www.watchfire.com/securearea/appscansix.aspx?id=701300000007t9c
--------------------------------------------------------------------------
