用户从Web服务器下载php文件？

Question

say if a user knows the path of a php file can the user download the file ? Are there any steps to take to prevent it from happening ?

Answer 1

As long as your webserver if configured to interpret PHP files, those will be interpreted -- which means their output, and not their raw content, will be sent to the users.

Of course, if you have a script that takes a file path as a parameter, and displays the content of that file... you'll have to make sure that script is secured, to not display the content of PHP files ;-)