2006/5/27, Jochem Maas <jochem@xxxxxxxxxxxxx>:
2. any include file that does contain code that runs on inclusion contains something like the following as the first line of code: if (!defined('MY_APP_IS_SETUP')) die('try http://'.$SERVER['SERVER_NAME'].'/');
An enhancement to this strategy could be using an error header to prevent exposing the internal structure of your site: if (!defined('MY_APP_IS_SETUP')) { header("Status: 404 Not Found"); die; }