Re: Apache and PHP

[Gordon Messmer <yinyang eburg com>]

On Sat, 2002-08-31 at 06:20, David Kramer wrote:
> 
> .inc files are supposed to be included into .php files, not served 
> directly.  This is dangerous, as more comples PHP applications often have 
> private information in them about the system they run on.

...Which brings up this point, too:  any files, php or otherwise, which
contain sensitive information (SQL passwords, etc) are best stored
outside of the HTTP root, where no URL can get them, and only used as
includes.