I noticed that RoundCube uses a lot of *.inc files to be included. Then it uses .htaccess to disable users to view this files via the browser (in order to hide the source code).
Why not naming these files *.inc.php? With the .php extension you know that those files contains php code and users can't access the source code via the browser. Thereby, you don't have to set all the .htaccess files. Not to forget, sometimes one can't use .htaccess files or just forgets to copy them (thus leading of the source code still accessible from outside).
In short, using *.inc.php instead of *.inc has the following advantages:
- 1. No more using .htaccess
- 2. Disabled view of the source code, even without .htaccess
- 3. Makes installation a bit easier
I was wondering if I'm the only one with this on his mind... :)