I did a hack to the std files, I suggest you include it
in the next ver:
In the lib/ dir there are the PHP files, which are
server-side scripts (and one of them contains the PG
password) and the JavaScript files, which have to be
sent to the client.
I kept the PHP files in the lib/ dir but moved the JS
to a new 'publib/' dir. Then, I added a .htaccess (for
Apache) file with the lines "Order Deny,Allow", "Deny
from all" to the 'lib/' dir.
The whole point is that the code should be kept hidden
from the client (in the protected 'lib/' dir), best
within a secure dir. The client-side should keep
visible to the client, thus it has to be in a different
dir.
Logged In: YES
user_id=65709
It could be a good idea; however, the PG password is not visible
for clients, as it is put inside a PHP script, and the web
server
does not show the code of PHP scripts.