Re: Password in script
| From: | Sailom | Date: | Fri, 19 Jul 2002 04:33:59 +0000 |
| Subject: | Re: Password in script | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-108431@lists.php.net to get a copy of this message | ||
I just checked grant and it said something like...
GRANT USAGE ON *.* TO 'XXXXX'@'%' IDENTIFIED BY .........
Does this means user named 'XXXXX' can log in from any server? This may be
a silly question.
"Jonathan Rosenberg" <jr@tabbysplace.org> wrote in message
news:NDBBLKBKIKFIPIFMDDNHCELHGFAA.jr@tabbysplace.org...
> Yes, but if you're on a shared server, other users of the user will likely
> be able to read your PHP files & get the password.
>
> > -----Original Message-----
> > From: Tyler Longren [mailto:tyler@captainjack.com]
> > Sent: Thursday, July 18, 2002 23:10 PM
> > To: Sailom
> > Cc: php-general@lists.php.net
> > Subject: Re: [PHP] Password in script
> >
> >
> > It's fine. There's no other way to do it really. Somebody would have
> > to be able to see the source to the php file before they could see the
> > password for mysql. They won't get it just by viewing the webpage
> > that's already been parsed by php.
> >
> > --
> > Tyler Longren
> > Captain Jack Communications
> > tyler@captainjack.com
> > www.captainjack.com
> >
> >
> >
> > On Fri, 19 Jul 2002 10:03:02 +0700
> > "Sailom" <amorndet@colorado.edu> wrote:
> >
> > > I am new to PHP and MySQL and never have experience in this area. I
> > > am writing a PHP script that connects to MySQL server. I have to put
> > > a password of MySQL into the PHP script. I think it may not be
> > > secured. What do you think? How can I make it more secure? Thanks.
> > >
> > >
> > >
> > > --
> > > PHP General Mailing List (http://www.php.net/)
> > > To unsubscribe, visit: http://www.php.net/unsub.php
> >
> > --
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, visit: http://www.php.net/unsub.php
> >
> >
>