Re: [PHP] Placing the masterpassword

2011-11-03 Thread tamouse mailing lists
On Tue, Nov 1, 2011 at 8:24 AM, Florian Müller florip...@hotmail.com wrote: Hi all I got a little question about a good application design in PHP. If I use a mysql connection for example, I have to store my mysql-password somewhere in the code. If it's just in the mysql-class, that's not

[PHP] Placing the masterpassword

2011-11-01 Thread Florian Müller
Hi all I got a little question about a good application design in PHP. If I use a mysql connection for example, I have to store my mysql-password somewhere in the code. If it's just in the mysql-class, that's not that good, because if somebody changes the functionality, he'd see it. I also

Re: [PHP] Placing the masterpassword

2011-11-01 Thread Alain Williams
On Tue, Nov 01, 2011 at 02:24:05PM +0100, Florian Müller wrote: Hi all I got a little question about a good application design in PHP. If I use a mysql connection for example, I have to store my mysql-password somewhere in the code. If it's just in the mysql-class, that's not that good,

Re: [PHP] Placing the masterpassword

2011-11-01 Thread Jim Giner
I store things like this in a file above the document root - so not grabbable by URL. Don't store it in the code ... you then end up with the password stored in several places then difficult to change. -- Alain Williams Linux/GNU Consultant - Mail systems, Web sites, Networking,