PHP error fallback?

[random1]

Hi All,

 

I've been told that if the PHP engine and the server malfunctions its possible that a PHP code will show as plain text.

 

e.g.

<?php

echo('test page content');

?>

 

Is this the case? If so how can one minimize the security issue this causes?

[steveclondon]

Yea it is possible, you can look on google so you can encode your php files, however this does slow things down.

 

Personally I don't worry about it, it is unlikely that will ever happen.

[Mchl]

If you're worried about it, put your script outside of web directory.

 

See here for tutorial: http://www.phpfreaks.com/tutorial/php-security/page5