At 10:35 PM +0100 12/2/06, Alain Roger wrote:
I'm working on .htaccess file for improving security.
Based on documentation from PHPSEC.org, we should be able to store DB_USER
login and DB_PASS password in some secret-stuff (for example) file, which
should be located outside root of web document root. (for example in some
/path_to_secret folder)
The "path_to_secret folder" thing -- I have a question about.
I'm working with what a host provides me and I've seen paths that I
can traverse/access and paths in a .htpacess file that I can't. For
example, in one site I see a .htaccess file that contains:
AuthUserFile /home/admin/public_html/_vit_pvt/service.pwd
But, the "_vit_pvt" folder is not apparent. I can't get to it -- is
this a host file that only they can access, or is there a secret
handshake I need to get to it, or what?
Thanks.
tedd
--
-------
http://sperling.com http://ancientstones.com http://earthstones.com
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
