'Insulate' db connection
| From: | Andre Dubuc | Date: | Sun, 06 Mar 2005 14:26:05 +0000 |
| Subject: | 'Insulate' db connection | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-210093@lists.php.net to get a copy of this message | ||
Hi,
I am trying to 'insulate' my database connection from prying eyes by moving
the db connection code to a directory above docroot and then calling it by an
include. However, my IP has an open_basedir restriction in effect that
defeats what I'm trying to do.
Perhaps I'm unclear what what the open_basedir does, and perhaps IP is
protecting me from an even worse security risk. However, I can call, using
fopen, many counter code pages that reside in the directory above docroot -
so I'm confused here. Perhaps it's the use of include - is there another way
to do this?
*******************************************************************************************
The code so far:
On any page that needs a db connection (in docroot path):
<?php
....
include("db-conn.php");
...
?>
Db code page (located in directory above docroot):
<?php
$db = pg_connect("dbname=site user=confused password=toughone");
?>
Tia,
Andre