View Single Post
Old Apr 10th, 2006, 3:40 PM   #8
Polyphemus_
Expert Programmer
 
Polyphemus_'s Avatar
 
Join Date: Aug 2005
Location: Rotterdam, the Netherlands
Posts: 942
Rep Power: 4 Polyphemus_ is on a distinguished road
Quote:
Originally Posted by Mocker
for a linux/apache server here is the best way to prevent people from viewing the source

"killall -9 httpd"

or maybe in your .htaccess file

deny from all

.. if someone can see your website in their browser then they can see the source. PHP and other scripts just generates that source dynamically, you can still see the source it sends. Anything that is client-ran like javascript is sent to that users computer, so therefore they have complete access to it. Take daemons advice and brush up on Internet 101
Yup, a commonly used technique. You can place 'deny from all' in the httpd.conf file (if I recall correctly), too.
Polyphemus_ is offline   Reply With Quote