another SpC-x production... ref: http://www.securityfocus.com/archive/1/archive/1/437030/100/0/threaded source says, verbatim: // Configuration $config = "config.php"; // Require files require $config;