Re: web site security: how to hide login info for mysql-connection

Anders: > Somewhere, I've read that settings.php should be placed in a directory > outside the html/php-directories. Today, my web directory is > /home/anders/public_html and subdirectories to public_html. Should > settings.php be placed in /home/anders/include? That is correct - you are always best to keep password and such outside the web root where possible. As many people have pointed out on this list - it is a best practices thing that should be done. Be aware that wherever you store the settings folder, your php.ini should have that path in it's include_directories setting, and the webserver must have read permissions for that file. -- Cheers Mike Morton **************************************************** * * Tel: 905-465-1263 * Email: mike@webtraxx.com * **************************************************** "Indeed, it would not be an exaggeration to describe the history of the computer industry for the past decade as a massive effort to keep up with Apple." - Byte Magazine Given infinite time, 100 monkeys could type out the complete works of Shakespeare. Win 98 source code? Eight monkeys, five minutes. -- NullGrey