'Insulate' db connection

From: Date: Sun, 06 Mar 2005 14:26:05 +0000
Subject: 'Insulate' db connection
Groups: php.general 
Request: Send a blank email to php-general+get-210093@lists.php.net to get a copy of this message
Hi, I am trying to 'insulate' my database connection from prying eyes by moving the db connection code to a directory above docroot and then calling it by an include. However, my IP has an open_basedir restriction in effect that defeats what I'm trying to do. Perhaps I'm unclear what what the open_basedir does, and perhaps IP is protecting me from an even worse security risk. However, I can call, using fopen, many counter code pages that reside in the directory above docroot - so I'm confused here. Perhaps it's the use of include - is there another way to do this? ******************************************************************************************* The code so far: On any page that needs a db connection (in docroot path): <?php .... include("db-conn.php"); ... ?> Db code page (located in directory above docroot): <?php $db = pg_connect("dbname=site user=confused password=toughone"); ?> Tia, Andre

« previous php.general (#210093) next »