Posted by RomZ on 09/29/15 12:01
The reason lots of coders avoid using .inc extensions is following:
inc is displayed to the client browser as plain/text file and if you
store all your config files or any other php-related files in inc file
everyone is able to obtain an access to this file [yeah some people
will say there is .htaccess file to prevent folders\files from viewing
but if you'll forget to copy .htaccess while moving your site you'll
have a big security hole].
Navigation:
[Reply to this message]
|