Hello Marek, Monday, November 22, 2004, 12:18:22 PM, you wrote: MK> Yes, .inc files will show up as they are - php source, db MK> username/password etc. So it's even less secure unless you forbid MK> serving them: That would be the "properly configured web server" section of my post, assuming this has been done they are definitely not less secure than placing those details in a .php. Best regards, Richard Davey -- http://www.launchcode.co.uk - PHP Development Services "I am not young enough to know everything." - Oscar Wilde -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php