[RESOLVED] Protecting my .inc files

[ajoy39]

I know that the easiest way to keep people from reading the code in my .inc files is just to rename them .php so the server parses them, but I really like having the .inc file extension for sorting and reference. I also realize that there is probably a really easy way to block them from being read by a browser. I can't move them to a higher then root directory, I though of that way too lot in the process and I would have to rebuild the site to do that. I'm thinking .htaccess is the way to go i'm just not sure what specifically to put in it to make it so browsers can't read the files but they can still be accessed to be included in my site. Any help i appreciated.

[Derokorian]

If you can use .htaccess and they are in their own folder you just need the file to contain:

Deny From All

And that will deny access to any user trying to access that folder.

[ajoy39]

that did it, thanks

[jeepin81]

or to just deny '.inc' files you can add this to your config or to an .htaccess file

<Files ~ "\.inc$">
  Order allow,deny
  Deny from all
</Files>