Re: Breaking lines
| From: | Google Kreme | Date: | Tue, 03 Oct 2006 18:51:25 +0000 |
| Subject: | Re: Breaking lines | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-242574@lists.php.net to get a copy of this message | ||
On 03 Oct 2006, at 12:40 , Deckard wrote:
Richard Lynch wrote:It might not be unusual, but it's not that bright.First, you're scaring the [bleep] out of me from a security standpoint writing mysql passwords into files...It's not that unusual.
It's a matter of securing the web server.There are better ways to go. My solution (which is not a great one, but better, at least) is to put the database login info into a separate file named something like .htdbpass. require('.htdbpass'); This way, at least, apache is pre-build to never allow access to the file, since it blocks all accesses to .ht* And yeah, a key is better, but I've not gotten that far. -- Critics look at actresses one of two ways: you're either bankable or boinkable.