Oh, blimey! This is a topic in itself!
The latest Linux Format has an article about this, FWIW. There are all sorts of things to consider when putting PHP scripts onto a live server, in order to lock down the security. But its a good option is to include key files from locations on the file system which cannot be run directly by the webserver, but can only be reached by the PHP engine, yes.
Dan
|