Hi, I'm new here.

I have a question about best practice.
What is the best way to set up a connect script so that it can be included in php code, but is not viewable/acessable from an internet browser?

I've seen recommendations to put it above the htdocs folder, but that does not seem to be possible here?

Thanks, and apologies for such a basic question.

Joe

Why not just use a "includes" folder?

I just thought that if the file is readable from a browser, it might be (somehow) possible to see the scripting code, userid and password.
Thanks

Use a .htaccess in the includes directory, within which:



The web browser will refuse to read any file within that directory then; providing the filename ends in '.php', unless Apache's php module breaks, the source of the script is not viewable from a browser in any case.