Member Avatar for almostbob

I think php includes are better as include.inc.php than include.php.inc
I can read .inc files over http, files above the root on insecure servers http://www.blabla.com/../../thisfileisnotsecure.inc
I cant read .php files, only the output, if an include does not have output, is constants or sql_connect, I cant read it

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.