NYCPHP Meetup

[Analysis & Solutions]

Hi David:

On Fri, Sep 26, 2003 at 06:45:02AM -0700, David Vogel wrote:
> 
> I just tried a little test:  
> From a file in a public directory I included a file located in a file
> that is restricted with .htaccess.  I was hoping that I might be asked
> to authenticate, but instead the file was included normally.

When a PHP script is executing and the script is asked to include files ON
YOUR server, those file accesses will be made via the operating system,
not the web server.  Thus, .htaccess has no role to play.

Enjoy,

--Dan

-- 
     FREE scripts that make web and database programming easier
           http://www.analysisandsolutions.com/software/
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
 4015 7th Ave #4AJ, Brooklyn NY    v: 718-854-0335   f: 718-854-0409