将安全文件保存在PHP包含文件夹中

Question

On the Apache Server it is possible to define a directory for PHP includes. The path to the include folder is out of root, and does not conflict with the server script. The reason why I think it is nice to store the secure files like config.php and db-access.php in the PHP global include folder, is that I don't have to define the path for each and every single page in my web application. I can simply do as following:

<?
require_once('config.php');
require_once('db-access.php');
?>

But then I have a question cause, besides that the include folder is outside of root, is it still save enough?

Answer 1

It will be save enough, it you wouldn't place it under your htdocs folder ( folder, which is accessible via you web server ). So, you can put it in any other places.

Answer 2

Way to include file from root directroy

<?php 
$path = $_SERVER['DOCUMENT_ROOT'];
$path .= '/folder/config.php';
require_once($path);
?>

OR Use if they are in your public_html or www folder

 Order allow,deny
deny from all

Answer 3

use .htacces

order deny,allow
deny from all