Include path directory and security qq

[Anon]

Two minor problems

1. How can I determine the include path for PHP on my server? I've looked through the help files my hosting service has and it doesn't mention it. Is there a script or something I could run to see what it is?

2. Are there any tutorials or articles on good security principles to keep in mind when running a site with PHP scripts that access a MYSQL database?

Thanks 🙂

[sepodati]

Run phpinfo() and search through the output to see where your include path is. Make a file called info.php (or whatever) and put only the following line in it:

<? phpinfo(); ?>

That will show you a great number of things, including where your include path is...

---John Holmes...