What do you use for PHP includes?

justinw · #1 (**permalink**) 07-15-2004, 03:27 PM

I was wondering, with PHP includes, what type of file do you include? Does it matter?

My files that contain the HTML is .inc

You?

HardCoded · #2 (**permalink**) 07-15-2004, 04:59 PM

It doesn't matter. Just keep in mind that any other extension than PHP will be served as plain text if someone ever felt like calling it directly. So whenever I'm inclined to call something .inc I usually go .inc.php, just in case I ever forget myself and actually throw a database password in there or something.

splinter · #3 (**permalink**) 07-15-2004, 10:25 PM

I always keep my passwords in a seperate file anyway.

vivekar · #4 (**permalink**) 07-15-2004, 10:26 PM

Good programming practice is to use
.php extension

.inc, .txt extensions can be vulnerable.
If you happen to store database passwords or other secure details in your inclusion files (with .inc, .txt extensions), you are just inviting trouble.

Since .php files are parsed and interpreted by the server, even if the file is accessed directly, your contents are safe.