Does the include() statement slow down my scripts?
A
Because an included file must be opened and parsed by the engine, it adds some overhead. However, the benefits of reusable code libraries often outweigh the relatively low performance overhead.
Q
Should I always end script execution if a file cannot be opened for writing or reading?
A
You should always allow for this possibility. If your script absolutely depends on the file you want to work with, you might want to use the die() function, writing an informative error message to the browser. In less critical situations, you still need to allow for the failure, perhaps by adding it to a log file.
Q
Where can I get more information about security on the Web?
A
One authoritative introduction to web security is "The World Wide Web Security FAQ" document written by Lincoln Stein, found at http://www.w3.org/Security/Faq/.
