[UPHPU] PHP/MySQL Security

[Walt Haas]

On Wed, 2007-07-11 at 16:47 -0600, Richard K Miller wrote:
> I like to use .inc.php for include files, but never .inc alone.

There is one little gotcha to adding multiple extensions to the name of
a file, which I discovered the hard way =:-O

phpDocumenter starting with about version 1.3.0 named its HTML output
files generated from PHP files with a filename ending "....php.html".
When Apache serves a file with such a name, it tries to apply the
handler associated with the PHP extension first, causing a bunch of
errors because the HTML document is not a valid PHP program. The
solution was to add the following to httpd.conf:

<FilesMatch "\.php\.html">
  RemoveHandler .php
</FilesMatch>

-- Walt