No.  .inc files will typically show up as text in a web browser.

BUT you should usually keep all your include files that are sensitive
outside the web-root tree.

For example:

/www is the directory for your web pages.

have a separate directory OUTSIDE the /www tree.  Something like
/php-includes.

Then, have /php-includes the value in your php.ini file for include files.

This way you have nothing to worry about because Apache is not allowed to go
to the /php-includes directory.

Adam Lang
Systems Engineer
Rutgers Casualty Insurance Company
http://www.rutgersinsurance.com
----- Original Message -----
From: "Sokun Chorn" <sokunxp@g...>
To: "professional php" <pro_php@p...>
Sent: Monday, August 20, 2001 1:30 PM
Subject: [pro_php] Include file


> Does include file extension .inc is good fo security ?
>
>