Includes

Includes

I suppose you people already know this - but in case you don't - you should always put your "includes" *outside* the web-accessible directories. I've finally learned *how* to do this :D Go me!

Hehe - indeed. Or at least make a .htaccess file in the include directory containing this:

Code:

Deny from all

Now, see, I didn't think of that. :lol: Figures.

By the way, isn't this the correct way to do it?

Code:

order allow,deny
deny from all

Also, if you want to only deny certain file extensions, use this:

Code:

<Files *.txt>
order allow,deny
deny from all
</Files>

Just replace txt with your extension.