FrontAccounting forum — .inc Files

Re: .inc Files

2011-05-20T13:46:44Z

Yea ok cool, I'll go with an .htaccess.

Re: .inc Files

2011-05-13T14:58:39Z

This cannot be done (in current FA framework). Files with .php extension are executed, which would open real security hole in application.
If you will turn htaccess support on with AllowOverride option in your apache server configuration files, all the *.inc files will not be available via http.
BTW FA is open sourced, so the files are publicly viewable anyway .

.inc Files

2011-05-12T15:45:26Z

It would be nice if future versions of FrontAccounting would add .inc.php suffixes to included files instead of just .inc. If a file just has .inc at the end most web servers will not parse the file and thus your source code (in addition to many database queries) are publicly viewable if a URL is guessed.