[Webpro] Naming tipp for PHP includes
Gunther Konig
nitchcock at gmail.com
Sat Mar 12 15:57:58 EST 2005
> > What can be done to avoid this? Simply give your include files the
> > ending '.php' instead, and the server will parse all the PHP code
> > before sending it to the client, so no backend code is revealed.
> Or have your include folders outside the web site path.
Or add the .inc extension to be parsed by php. - this is more to make
sure your older script are "safe" (or scripts made by others).
Also, remove the automatically backup files created by your editor.
There was a time when I was using JOE for editing the php files
(easier to learn than VIM, that's all :) ) and it left behind all the
~ files (e.g. index.php~).
More information about the Webpro
mailing list