security/setup question: php3 script contains db password, but script must be readable by nobody: any solution?
| From: | Dries Verachtert | Date: | Sun, 14 May 2000 20:31:19 +0000 |
| Subject: | security/setup question: php3 script contains db password, but script must be readable by nobody: any solution? | ||
| Groups: | php.db | ||
| Request: | Send a blank email to php-db+get-17@lists.php.net to get a copy of this message | ||
Hello,
I use apache with php3 and mysql to get some data out of the mysql database
like probably lotsa people do. The php3 file contains the password, because
it must be able to connect to the database with a valid password. This file
also needs to be readable because nobody (the user of the apache webserver)
must be able to read the file. At least i think this is the reason because
without a chmod o+r it doesn't work. There are ca. 200 users on this
machine.. so i would like to avoid the possibility that other users get this
password. Are there any solutions? I already checked the faq and i couldn't
find it.
Thanx in advance,
Dries Verachtert