Re: is it safe to store username and password for mysql connection in session variables?

From: Date: Mon, 24 Nov 2003 20:44:05 +0000
Subject: Re: is it safe to store username and password for mysql connection in session variables?
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-170824@lists.php.net to get a copy of this message
David Sklar and Adam Trachtenberg (two smart guys who authored the PHP Cookbook) suggest storing this information in the Web server's environment.
Guess we are talking about recipe 8.20 and 8.21? I'm on a SunOS shared server. Should I add "SetEnv DB_PASS password" to the .htaccess file in my public_html dir and then access it as $_ENV['DB_PASS']? What should the access rights to .htaccess be? -rw------- or something else? -- anders thoresson

« previous php.general (#170824) next »