• Registered: 05/12/2011
  • Posts: 3

Topic: .inc Files

It would be nice if future versions of FrontAccounting would add .inc.php suffixes to included files instead of just .inc.  If a file just has .inc at the end most web servers will not parse the file and thus your source code (in addition to many database queries) are publicly viewable if a URL is guessed.

  • Registered: 12/25/2007
  • Posts: 2,448

Re: .inc Files

This cannot be done (in current FA framework). Files with .php extension are executed, which would open real security hole in application.
If you will turn htaccess support on with AllowOverride option in your apache server configuration files, all the *.inc files will not be available via http.
BTW FA is open sourced, so the files are publicly viewable anyway wink.

  • Registered: 05/12/2011
  • Posts: 3

Re: .inc Files

Yea ok cool, I'll go with an .htaccess.