RE: [PHP-DB] How can you hide database login passwd in your scrip t?

For everybody who cannot change system settings like ownership of directories and access configurations in the webserver: Make a simple include file containing: $db_passwd = "secret"; (just plain ascii) and put it in a directory beneath (or higher than, whatever is your point of view) the webroot. For example: <MY_HOME_DIR>/wwwroot is the webroot; then place it in <MY_HOME_DIR>, or make another subdirectory there. In the include statement use the full pathname, like: include "/home/some_user/hidden_pages/db_pass.inc"; If PHP on your server does not work correctly at any time, then the include file is not included... It's simple, cheap, and safe! Success, Marco 05-09-2001 10:22:04, speedboy <speedboy@nomicrosoft.org> wrote: >> $0 option: >> Put your user ID and password in a config file, then give only the >> webserver user access to it. Read the config file to make it work. This >> also allows easy switching between test and production environments. > >You can't change the group owner of a file unless you have root. > >That does not stop another php user fopen'ing your config file. > > >-- >PHP Database Mailing List (http://www.php.net/) >To unsubscribe, e-mail: php-db-unsubscribe@lists.php.net >For additional commands, e-mail: php-db-help@lists.php.net >To contact the list administrators, e-mail: php-list-admin@lists.php.net > > > -- **************************************************************************** This message contains information that may be privileged or confidential and is the property of the Cap Gemini Ernst & Young Group. It is only intended for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message. ****************************************************************************