用于保存在文档树中使用require检索的文件的文件夹

Question

I'm building a website based on php and i want to ask where to put files that are retrieved with a require statement, so that they can not be accessed from users with their browser. (for example a php file that connects to my database)

EDIT actually i think the better way is to put them outside the public root because apache tutorial says htaccess will have a slowdown impact. it can be done with adding a ../ for example require("../myFile.php"); (At least this works in my server) Best regards to all

Answer 1

Just make them secure with .htacces!

Here's a very clear tutorial for protecting files with a password. If you don't need direct access to the files per browser, or only your scripts need access, just block them completly by changing the code between

<Files xy>
change this bit here
</Files>

to

  Order allow,deny
  Deny from all

Then you won't need your htpassword file anymore either!