In Reply to djjokla and others
Consider placing all incude files as mentioned before in a seperate folder containing a .htaccess containing a Order Deny,Allow
the create a index file, which is intended to handle ALL request made to you php application, then call it with index.php?view=index
the index file could look a bit like this:
<?php
switch($_GET['view']){
case 'index':
include('libs/index.php');
break;
default:
include('libs/404.php');
break;
}
?>
this could be an array or something even more creative. it actually does'nt matter how you do it... running all pages through one central script has one big advantage.... CONTROL.
at any givin time, you can easily implement access control to functions without forgetting crucial files.
