Hacker News new | ask | show | jobs
by BayesianDice 848 days ago
And then your text editor might leave a backup copy with filename "xyz.php~" which PHP won't interpret and Apache will happily serve to a curious user as plain text.

So I've heard :-)

1 comments

   <Files "*~">
       Require all denied
   </Files>

   <Files "DEADJOE">
       Require all denied
   </Files>
(last one assuming you're using joe)