Re: Security problem?
| From: | Tyler Longren | Date: | Tue, 25 Jun 2002 20:02:05 +0000 |
| Subject: | Re: Security problem? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-103835@lists.php.net to get a copy of this message | ||
No. The only way they can get your source is by ftping or having shell
access to your server. And even then, they'd have to have read perms on
your web folder/files. If you were to have a lot of unknown people
jacking around on your server, you have a lot of other stuff to worry
about that who's gonna steal your mysql username/password.
They can't just say:
Download http://yoursite.com/file_with_good_info.php
and get the php-source, all they'd get is the HTML source.
--
Tyler Longren
Captain Jack Communications
tyler@captainjack.com
www.captainjack.com
On Tue, 25 Jun 2002 20:46:04 +0100
"Peter" <newsaddress@saracenvsu.org.uk> wrote:
> When you have the standard
>
> $link = mysql_connect("localhost","username","secretpassword");
>
> Would it not be possible for someone to use PHP from another server to
> download your source and find out your MySQL details including
> password?
>
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>