Re: Password in script
| From: | Michael Hall | Date: | Fri, 19 Jul 2002 17:08:27 +0000 |
| Subject: | Re: Password in script | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-108449@lists.php.net to get a copy of this message | ||
The GRANT USAGE statement creates a user with no priveleges ... the user
exists but can't do anything.
See MySQL Manual section 6.13
Michael
On Fri, 19 Jul 2002, Sailom wrote:
> I just checked grant and it said something like...
> GRANT USAGE ON *.* TO 'XXXXX'@'%' IDENTIFIED BY .........
> Does this means user named 'XXXXX' can log in from any server? This may be
> a silly question.
>
>
> "Jonathan Rosenberg" <jr@tabbysplace.org> wrote in message
> news:NDBBLKBKIKFIPIFMDDNHCELHGFAA.jr@tabbysplace.org...
> > Yes, but if you're on a shared server, other users of the user will likely
> > be able to read your PHP files & get the password.
> >
> > > -----Original Message-----
> > > From: Tyler Longren [mailto:tyler@captainjack.com]
> > > Sent: Thursday, July 18, 2002 23:10 PM
> > > To: Sailom
> > > Cc: php-general@lists.php.net
> > > Subject: Re: [PHP] Password in script
> > >
> > >
> > > It's fine. There's no other way to do it really. Somebody would have
> > > to be able to see the source to the php file before they could see the
> > > password for mysql. They won't get it just by viewing the webpage
> > > that's already been parsed by php.
> > >
> > > --
> > > Tyler Longren
> > > Captain Jack Communications
> > > tyler@captainjack.com
> > > www.captainjack.com
> > >
> > >
> > >
> > > On Fri, 19 Jul 2002 10:03:02 +0700
> > > "Sailom" <amorndet@colorado.edu> wrote:
> > >
> > > > I am new to PHP and MySQL and never have experience in this area. I
> > > > am writing a PHP script that connects to MySQL server. I have to put
> > > > a password of MySQL into the PHP script. I think it may not be
> > > > secured. What do you think? How can I make it more secure? Thanks.
> > > >
> > > >
> > > >
> > > > --
> > > > PHP General Mailing List (http://www.php.net/)
> > > > To unsubscribe, visit:
> > > > http://www.php.net/unsub.php
> > >
> > > --
> > > PHP General Mailing List (http://www.php.net/)
> > > To unsubscribe, visit: http://www.php.net/unsub.php
> > >
> > >
> >
>
>
>
>
--
--------------------------------
n i n t i . c o m
php-python-perl-mysql-postgresql
--------------------------------
Michael Hall ninti@ninti.com
--------------------------------