Hoef said:Where do you see them? ... Mostly they are include files.
angelneo said:just take note when you are using server-side include (php/jsp/..) in your .inc, you have to remember to check whether the server parse the .inc file as script file. If not, it can be a security loophole if people unknowingly stumble upon them when they are place in those web accessible folders.