mysql_connect($server,$user,$password);
| From: | Chuck Han | Date: | Wed, 27 Jul 2005 20:41:09 +0000 |
| Subject: | mysql_connect($server,$user,$password); | ||
| Groups: | php.db | ||
| Request: | Send a blank email to php-db+get-39983@lists.php.net to get a copy of this message | ||
Much of the password discussion I've seen revolves around encrypting the
user-supplied password, but what about the user/password used to make the
initial connection? In other words, I'm assuming that the .php file has the
initial user and password right in the text in order to make the connection.
Is there a way around this, because it seems very insecure to me that these
parameters would be in the .php source. Or is the .php source supposedly
not readable?
thanks, Chuck