behindspace wrote:
inc files are "include" files, they can contain functions, classes or
routines that you write. something like "time.inc" would more then likely
have a function that generated the time and or date to display on a page.
inc files are also used in JaveScript as well.
Always place 'include-files' outside the documentroot of the webserver,
since they're not supposed to be invoked directly by a user altering his
URL.
In case you can't place files for inclusing outside the docroot, in most
situations it's better to use '.php' or '.inc.php' and make sure there's
nothing harmfull happening when you try to view them or make really sure
make sure the webserver doesn't show .inc files...
It's a common mistake to put passwords etc. in a funtion e.g. for
database access and when that's an .inc file and it doesn't get parsed
through php but the source is sent to the user plain text... u c
Hans
--
"He who asks a question is a fool for five minutes;
he who does not ask a question remains a fool forever"