Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.php > #2027

Re: self-modifying program

From jeff <mung_me@att.net>
Newsgroups comp.lang.php
Subject Re: self-modifying program
Date 2011-06-08 08:17 -0400
Organization albasani.net
Message-ID <isnpb5$8i5$1@news.albasani.net> (permalink)
References <d0e20bb0-d640-4b5d-80a0-186ac78ecfad@u19g2000vbi.googlegroups.com> <isn7n8$i7r$1@dont-email.me> <896c1e2b-e0c0-4554-a65c-8922a92fb81e@a7g2000vby.googlegroups.com> <u9ouu69kh8asgk07f462ca346or3j7rg0m@mfesser.de>

Show all headers | View raw


On 6/8/2011 7:50 AM, Michael Fesser wrote:
> .oO(Jivanmukta)
>
>>> Why do you need that the file is reachable through the web browser?
>>
>> BTW, my website contains also "include" folder (for class.X.php,
>> lib.X.php). Should it be placed inside public_html?
>
> No, such scripts and configuration files should be stored outside the
> document root.

Why? The public sees nothing if they hit the script.

Not that I have a problem with putting such files outside public, but 
it's not uncommon to FTP to a server and just have the html root 
visible. I've never seen a server fail that exposed the php as plain 
text. Portability leads toward the more accessible path.

Myself, I would be far more concerned about having the MySQL user as: root.

J

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

self-modifying program Jivanmukta <jivanmukta@poczta.onet.pl> - 2011-06-07 21:44 -0700
  Re: self-modifying program "Álvaro G. Vicario" <alvaro.NOSPAMTHANX@demogracia.com.invalid> - 2011-06-08 09:17 +0200
    Re: self-modifying program Jivanmukta <jivanmukta@poczta.onet.pl> - 2011-06-08 01:59 -0700
    Re: self-modifying program Jivanmukta <jivanmukta@poczta.onet.pl> - 2011-06-08 02:55 -0700
      Re: self-modifying program "Álvaro G. Vicario" <alvaro.NOSPAMTHANX@demogracia.com.invalid> - 2011-06-08 13:44 +0200
      Re: self-modifying program Michael Fesser <netizen@gmx.de> - 2011-06-08 13:50 +0200
        Re: self-modifying program jeff <mung_me@att.net> - 2011-06-08 08:17 -0400
          Re: self-modifying program Michael Fesser <netizen@gmx.de> - 2011-06-08 15:07 +0200
          Re: self-modifying program Jivanmukta <jivanmukta@poczta.onet.pl> - 2011-06-08 07:44 -0700
  Re: self-modifying program Denis McMahon <denis.m.f.mcmahon@gmail.com> - 2011-06-08 21:41 +0000

csiph-web