RE: [PHP] Security

Just a couple of questions on how secure php is: = be sure it is secure, anyway.... Is there any way I can download a php script in full from a server? = only if the file is not a php-parsable Is it safe to store db information in php includes such as paswords, db name and username? = we all do that, but the file should again = 1. or it's extension is set in apache's httpd.conf to be parsed for PHP codes, = 2. If the file is outside root (inaccessible via HTTP) and being included by include(), require() ... = 3. The file with the password is under .htaccess password protection (the Whole directory is then secure) Is it safe to store usernames and passwords in .php files? = 1. If the server is yours, then yes. Also, you don't need to worry about me using this info to hack into stuff. I am new to php dev and I need the app that I am creating to be completly secure. thanks scott == My comment on this is: No Way allow anyone else to upload any file on the machine. Some files can autorun, or you could write some piece of code and then hack. So as long as there only you to access the machine whether via telnet or via FTP it is secure. example, if you would let me to upload a file somewhere on your website I would be able to see every file that is on that machine just by having one single line with one single function. ( Won't tell you which, scared of being hacked :-)))) ) Don't worry man, the security is how YOU configure it, not how THEY developed PHP .. Maxim Maletsky. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net For additional commands, e-mail: php-general-help@lists.php.net To contact the list administrators, e-mail: php-list-admin@lists.php.net