One in every 600 websites has .git exposed

Re:One in every 600 websites has .git exposed by pmx on Monday July 27, 2015 @08:19AM (#9954688)

It takes very little effort in php. You simply have your index.php and any public assets in the document root and then use index.php as a bootstrap to bring up your application. Everything else goes outside of the document root.

[ Parent | on HN ]

Re:One in every 600 websites has .git exposed by vog on Friday July 31, 2015 @03:16AM (#9980380)

Yet, almost all well-known PHP applications don't have a public directory. And almost all non-PHP webapplications do have a public directory (e.g. practically all Python/Django and Ruby/Rails projects).

So the connection to PHP is apparent till today, although it may have to do more with crappy super-cheap hosting providers than with the language itself.

[ Parent | on HN ]