> Given that the data are on a shared server, then your info is available to
> anybody else with root access to the database directories. A previous
> web-site I had allowed me open access to other users mysql databases. I
> could have blown those databases away.
Thankfully, I happen to be that
> Store the connection strings in an include file preferably outside the
> wed root. You can include files with a fully resolved path, or using the
> php include_path variable if you have access to the configuration.
> Alternately, if you don't have access to directories outside the
> webroot, put
Store the connection strings in an include file preferably outside the
wed root. You can include files with a fully resolved path, or using the
php include_path variable if you have access to the configuration.
Alternately, if you don't have access to directories outside the
webroot, put the
Set the username and password for your database to whatever you want. It
doesn't have to be nobody/nobody.
Pass the username and password from an include file.
Miles Thompson
At 09:31 PM 1/6/2002 -0800, patrick gibson wrote:
>I'm new to PHP, and I have a question regarding the storage of conne
I'm new to PHP, and I have a question regarding the storage of connection
properties to the database. I have a site on a shared (Unix) server. I'm
adding some PHP to a section which will be database-driven. I'm concerned
about storing the username and password to my database (some of the data
cont