Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:48295
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 74.125.82.42 as permitted sender)
DomainKey-Status: bad
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :cc:content-type:content-transfer-encoding;
        b=lDLZSuNLEp89IYr7b4sHKBqdMDzWrHj8CGP8vLeOk3boL2OnVzLOq8mKebYZDz2LIR
         jZM0+K0WodUae08EUNbyHRMobUMnXMYPTC6KVRBtdvx7y6dhFXpL2nCietOqyD/Kj0Um
         VasKzMbHZvWxc1XxXrmkjRTTSRlkNXYSTMgmo=
MIME-Version: 1.0
In-Reply-To: <AANLkTimVto4eKYx648EBp11FpydK2mSYHsUh_454UM_K@mail.gmail.com>
References: <AANLkTinIHpJeics-vP9aDFaQPtXpyvBul3fQ24C3Oprf@mail.gmail.com>
	 <1273841634.4175.9.camel@guybrush>
	 <AANLkTilF-zFwn40LuXdxVNwxYmZq50fRTZkDanuHrmKP@mail.gmail.com>
	 <1273846929.4175.16.camel@guybrush>
	 <AANLkTimVto4eKYx648EBp11FpydK2mSYHsUh_454UM_K@mail.gmail.com>
Date: Fri, 14 May 2010 18:21:57 +0300
Message-ID: <AANLkTilpiEj0A45Y22sH6e670Bxa3iMabxyGOU-KKZ7P@mail.gmail.com>
To: Mathias Grimm <mathiasgrimm@gmail.com>
Cc: =?UTF-8?Q?Johannes_Schl=C3=BCter?= <johannes@schlueters.de>, 
	internals@lists.php.net
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Subject: Re: [PHP-DEV] Sugest
From: arvids.godjuks@gmail.com (Arvids Godjuks)

2010/5/14 Mathias Grimm <mathiasgrimm@gmail.com>:
>>
>> > 2010/5/14 Johannes Schl=C3=BCter <johannes@schlueters.de>
>> > =C2=A0 =C2=A0 =C2=A0 =C2=A0 > <?php
>> > =C2=A0 =C2=A0 =C2=A0 =C2=A0 > require
>> ....

There is one thing you don't take into account.
Make an index.php and all other files .inc. Than add to web servers
configuration a deny rule for *.inc . Suddenly you improved your
security dramatically because there is only one access point for the
whole project. I use this 100% every time.