Re: PHP security
| From: | Chris Shiflett | Date: | Fri, 18 Feb 2005 05:12:54 +0000 |
| Subject: | Re: PHP security | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-208987@lists.php.net to get a copy of this message | ||
--- ".....hG" <forums@helmutgranda.com> wrote:
> While back I read in an article that placing UN and PASSwords in a PHP
> was not secure.
Well, that's very subjective. In a shared hosting environment, it
certainly does pose a risk. If you place it within document root (don't do
that), it poses a significant risk.
My favorite method of handling this is described at the end of this
article:
http://shiflett.org/articles/security-corner-mar2004
Hope that helps.
Chris
=====
Chris Shiflett - http://shiflett.org/
PHP Security - O'Reilly HTTP Developer's Handbook - Sams
Coming Soon http://httphandbook.org/