[dev] .inc files

Joris Braakman jorisb@nl.euro.net
Mon, 26 Nov 2001 18:45:57 +0100


On Sun, Nov 25, 2001 at 02:01:44PM +0000, Anil Madhavapeddy wrote:
> On Fri, Nov 23, 2001 at 08:35:26PM -0500, Jon Parise wrote:
> > Also along the lines of templates, we should rename all of the
> > .inc files to .php files.  That way, they'll be uniform, and we
> > won't have to worry about .inc files not being parsed by the web
> > server.
> > 
> 
> Why?  I thought we had this debate a while back, and concluded
> that they should be ".inc" files exactly because they shouldn't
> be parsed by the web server.

I have a modified version of test.php with a security section. It checks 
a) if test.inc file is public available
b) if the lib directory is public available

One could add more directories, but I just wanted to start simple. Dunno
it this is interesting to use. It  would make it easyer for users to increase
the security. I tried to follow the coding standard.  

A preview with the errors at: http://www.metaverse.nl/horde/test.php 
A diff and test.inc at: http://www.metaverse.nl/horde/test.tgz 
(available for a limited time only)


Joris.