RE: [PHP-DB] Security

Hi, You could store your username and password in a file outside of the webserver document root and then include it in your script using the filesystem path. I think that's the best way to keep them from seeing your stuff. I'm not sure how your webserver is setup, but they shouldn't be able to download your php files. Jason -----Original Message----- From: Enrico Comini [mailto:algobit@algobit.com] Sent: Thursday, September 21, 2000 10:36 AM To: ML-PHP-DB Subject: [PHP-DB] Security Hi My problem is the security. In my site there are many file.php There are too INDEX.PHP3 and INDEX.HTML but if ONE see the file list and download the php files then He read my script with user name and password to connect my database and other information. How is possible to make the file in the site HIDDEN to prevent it ? Have you a solution ? ENrico _______________________________________________________ Site Design, Hosting, and E-Commerce at www.webpipe.net