Dave Goodchild wrote:
Unless some server config error causes that stuff to be output on the page?
I tend to put such functions in a .inc file and amend the .htaccess to
prevent download.
Unless some server config error causes it to ignore .htaccess.
The basic rule when it comes to securing this stuff is to stick it
outside the web root. That way only a monumentally stupid server admin
or developer can make it possible for the average web user to get at it.
Oh, hang on...!
-Stut
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
