Local security on username and password include file...(OCILogon)
| From: | Serkan AKCIN | Date: | Wed, 02 Aug 2000 07:21:04 +0000 |
| Subject: | Local security on username and password include file...(OCILogon) | ||
| Groups: | php.db | ||
| Request: | Send a blank email to php-db+get-1695@lists.php.net to get a copy of this message | ||
Hi,
Yesterday, Php worked and a simple code can query the oracle database.
OCILogon("scott","tiger","a.b.com");
worked.
But this code was written in a oracle.inc file and has 744 permisson on
Linux.
Anyone has an account on my machine can see the plain text file,
so my database's passwords is reachable by anyone on my linux box.
grep Logon /var/lib/apache/htdocs/oracle.inc
How can I secure my include files and let them executable by nobody from the
www.
Thanks to answers by now.