Can someone please explain to me that what is the advantage of using *.inc as extension name? [message #23075] |
Thu, 03 March 2005 06:41 |
virileman
Messages: 4 Registered: March 2005
Karma: 0
|
Junior Member |
|
|
Hello
I would like to be a programmer with security in mind. There are many people/articles recommend that FUDforum is a secure forum. So, I look into the codes and try to learn something from it.
I have a question that *.inc file's full source can be download. I am wondering what the purpose is of coding like that? Could you please explain to me what is the advantage and disadvantage of using *.inc instead of *.php?
Thanks for your suggestions and hints.
|
|
|
Re: Can someone please explain to me that what is the advantage of using *.inc as extension name? [message #23080 is a reply to message #23075] |
Thu, 03 March 2005 15:05 |
Ilia
Messages: 13241 Registered: January 2002
Karma: 0
|
Senior Member Administrator Core Developer |
|
|
When you install the forum you are asked for web path and data path and it is recommended that the data path now be browseable (outside of browseable dirs). If you want to keep the forum all in one dir that is fine too, as every non-direct access dir has .htaccess file with directive to deny access to all.
Even if the files are visible they do not contain any sensetive information like passwords etc...
Making them .php would be prolematic since some .inc have code that is executed in the main scope and if they were called .php, it would be executed.
FUDforum Core Developer
|
|
|
|
|