How to prevent access to certain URL requested pages?
If i have form.html, processFrom.php and getResults.php in my webapp root, even though processFrom.php does not echo any content, how can i prevent the user from accessing this file by typing in the URL?
Presumably you only ever access it via an
includestatement, or similar? Your safest bet would be to put it elsewhere on your filesystem, and include it from there.Anything that isn’t served by the web server shouldn’t be kept under the web root.