Re: Protecting database passwords

On Friday 02 July 2004 04:43, Peter Brodersen wrote: > You could move the virtual host to its own file, only readable by root > (and include this virtual host-file in httpd.conf). > > Use SetEnv in this virtual host to set values like DBUSER, DBPASS and > so on: > http://httpd.apache.org/docs/mod/mod_env.html#setenv > You can choose whatever names you like. > > The PHP script would then just have to read these environment values > to retrieve username and password. Or alternatively you can just set these: mysql.default_user mysql.default_password etc inside your <VirtualHost> containers. -- Jason Wong -> Gremlins Associates -> www.gremlins.biz Open Source Software Systems Integrators * Web Design & Hosting * Internet & Intranet Applications Development * ------------------------------------------ Search the list archives before you post http://marc.theaimsgroup.com/?l=php-general ------------------------------------------ /* Stealing a rhinoceros should not be attempted lightly. */