<?xml version="1.0" encoding="utf-8" ?><rss version="2.0" xml:base="https://www.webmaster-forums.net/crss/node/1022200" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title></title>
    <link>https://www.webmaster-forums.net/crss/node/1022200</link>
    <description></description>
    <language>en</language>
          <item>
    <title></title>
    <link>https://www.webmaster-forums.net/serverside-scripting/php-includes-and-security#comment-1136870</link>
    <description> &lt;p&gt;Many hosts give you access to `/home/username` with your Document_Root set to `/home/username/public_html`.  Anything within `/home/username` but outside of `/home/username/public_html` is considered outside of the web root.&lt;/p&gt;
 </description>
     <pubDate>Wed, 27 Aug 2003 06:35:21 +0000</pubDate>
 <dc:creator>Mark Hensler</dc:creator>
 <guid isPermaLink="false">comment 1136870 at https://www.webmaster-forums.net</guid>
  </item>
  <item>
    <title></title>
    <link>https://www.webmaster-forums.net/serverside-scripting/php-includes-and-security#comment-1136861</link>
    <description> &lt;p&gt;i don&#039;t know. i haven&#039;t done much with getting things hosted outside fo the space i had at school. personally i think it&#039;s foolish to have everything about a client in webspace, because you don&#039;t wan their e-mail web accessable and some people (like me for instance) like to use pine (or something similar) to screen e-mails before downloading.&lt;/p&gt;
 </description>
     <pubDate>Tue, 26 Aug 2003 20:23:06 +0000</pubDate>
 <dc:creator>m3rajk</dc:creator>
 <guid isPermaLink="false">comment 1136861 at https://www.webmaster-forums.net</guid>
  </item>
  <item>
    <title></title>
    <link>https://www.webmaster-forums.net/serverside-scripting/php-includes-and-security#comment-1136853</link>
    <description> &lt;p&gt;&quot;to add to that. move it outside the web dir...&quot;&lt;/p&gt;
&lt;p&gt;m3rajk, is it common for shared web hosts to allow clients to add folders out of the web directory? I don&#039;t have this ability with a current host.&lt;/p&gt;
&lt;p&gt;TM&lt;/p&gt;
 </description>
     <pubDate>Tue, 26 Aug 2003 18:06:05 +0000</pubDate>
 <dc:creator>TonyMontana</dc:creator>
 <guid isPermaLink="false">comment 1136853 at https://www.webmaster-forums.net</guid>
  </item>
  <item>
    <title></title>
    <link>https://www.webmaster-forums.net/serverside-scripting/php-includes-and-security#comment-1136847</link>
    <description> &lt;p&gt;easiest thing to do, have it .php&lt;/p&gt;
&lt;p&gt;now they can&#039;t get it served to them in plaintxt.&lt;/p&gt;
&lt;p&gt;to add to that. move it outside the web dir... ie:&lt;/p&gt;
&lt;p&gt;you get ~/user/ for your dir. you put your web stuff on ~/user/web/ ave your includes in ~/user/includes/&lt;/p&gt;
&lt;p&gt;the serving software can still get to it, as can you via ssh (telnet over ssl) but not anyone doing webbrowsing.&lt;/p&gt;
&lt;p&gt;you have now resticted tothe machine. going beyond that... you will either need to chgrp it and chmod (640) it so that ls -la gives something like:&lt;br /&gt;
-rw-r----- user server  file.php&lt;/p&gt;
&lt;p&gt;this means you own it and the group it&#039;s in is the webserver. the owner has read/write. the webserver just read&lt;/p&gt;
 </description>
     <pubDate>Tue, 26 Aug 2003 16:53:59 +0000</pubDate>
 <dc:creator>m3rajk</dc:creator>
 <guid isPermaLink="false">comment 1136847 at https://www.webmaster-forums.net</guid>
  </item>
  <item>
    <title></title>
    <link>https://www.webmaster-forums.net/serverside-scripting/php-includes-and-security#comment-1136805</link>
    <description> &lt;p&gt;Well maybe a .htaccess file could help you out there, not sure how though...&lt;/p&gt;
 </description>
     <pubDate>Tue, 26 Aug 2003 05:41:51 +0000</pubDate>
 <dc:creator>Renegade</dc:creator>
 <guid isPermaLink="false">comment 1136805 at https://www.webmaster-forums.net</guid>
  </item>
  </channel>
</rss>
