httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Nicholas Sherlock <n.sherl...@gmail.com>
Subject [users@httpd] Re: Running php scripts outside of document root
Date Mon, 25 May 2009 06:07:05 GMT
Lyle Wincentsen wrote:
>     Thanks for your help, that solved the problem.
>      
>     To answer your question as to why I don't want my php scripts to be
>     in the document root tree, it is a potential security issue. I would
>     rather not allow anyone to peruse my source code as they may be able
>     to find ways to exploit it more easily. 

Being in the document root does not imply that people will be able to 
read your code. If they browse to the file, they'll just see the output 
from the script, not the source itself.

Cheers,
Nicholas Sherlock


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message