Re: hiding db password
| From: | Christophe Casalegno | Date: | Thu, 12 Jun 2003 14:31:24 +0000 |
| Subject: | Re: hiding db password | ||
| References: | 1 | Groups: | php.db |
| Request: | Send a blank email to php-db+get-28577@lists.php.net to get a copy of this message | ||
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Le Jeudi 12 Juin 2003 16:38, mike karthauser a écrit :
> Then you should be able to do:
>
> Include"/path/to/pass.inc.php";
> <snip>
> $conn = OCILogon("$user","$pass");
>
> Which is more secure.
I prefer user require_once mort than include for security reasons.
You can also implement security function like crypto for the connexion, etc..
But i am thinking the real security problem is the system and the network...
friendly,
- --
Christophe Casalegno | Digital Network | UIN : 153305055
http://www.digital-network.net | http://www.speed-connect.com
http://www.securite-reseaux.com | http://www.dnsi.info
Security engineer network/systems | Intrusion tests specialist.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQE+6I680mOixX2DR8IRAprXAJ9yJCHgx++REy+jfDBD1KTO0QhUVwCcD1hv
lUQRpfuUWz3YMJdCvMfRCpk=
=WB6u
-----END PGP SIGNATURE-----