[snip] How can I protect all files with extension .xml from being accessed by the outside? For Apache can one use .htaccess (if yes, how?), is there a generic way of keeping stalkers from viewing your config files? [/snip] You can put them outside of the web root so that they are not accessible to the general public. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php