- Emphasise on the need to split files in an application in order to
be able to provide a web-accessible directory and one which is not
accessible to the web-user.
- Adjusted the logic, i.e. adding a 'not' when talking about content
that shouldn't be executed and hence not placed in a
web-accessible directory.
- Capitalise Apache (since PHP and Perl are used in their respective
spelling as well)
- Capitalise PHP once (must've been forgotton before)
- Added a link to the debian policy for documentation
- Added some notes about most common PHP application insecurities
|