RE: [PHP] web site security: how to hide login info for mysql-connection
| From: | Mike Migurski | Date: | Mon, 30 Jun 2003 20:57:07 +0000 |
| Subject: | RE: [PHP] web site security: how to hide login info for mysql-connection | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-153481@lists.php.net to get a copy of this message | ||
>><Directory /var/www/html/mydatabase>
>> php_value mysql.default_user fred
>> php_value mysql.default_password secret
>> php_value mysql.default_host server.example.com
>></Directory>
>
>Hmmmm.... what about phpinfo()? It shows those settings in the clear.
solution: don't leave stray phpinfo's on a production site. :)
---------------------------------------------------------------------
michal migurski- contact info and pgp key:
sf/ca http://mike.teczno.com/contact.html