You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to OC PHP
Where do people usually keep their includes for PHP in www, above the www directory? I've been doing mine in www, but have started to make the move of putting the includes outside of the www directory just for security. Thoughts?
Scott Norman
losthit...@gmail.com
unread,
May 4, 2007, 1:12:17 AM5/4/07
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to OC PHP
The majority thought at previous OCPHP meetups is, for added layer of security, to include the majority of the code out of www. This is especially true for any includes/scripts or configs that contains login information for databases.
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to OC PHP
I'm in the same boat as you. However, I have recently started using my htaccess files to disable access to my include files. I should also throw some logic in the files too to make sure they're being called by my application too...