Re: any security problems with this?

From: Date: Tue, 12 Jun 2007 12:37:13 +0000
Subject: Re: any security problems with this?
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-256688@lists.php.net to get a copy of this message
Ross wrote:
I have a page of functions that I include in my page head. In this I have a function to connect. I can then just call this on each page when i need it. Does doing it this way cause any potential security risks? function connect() { $host="localhost"; $user="xxxxx"; $password="xxxxxx"; $dbname="xxxxx"; $link = mysql_connect($host, $user, $password) or die ('somethng went wrong:' .mysql_error() ); mysql_select_db($dbname, $link) or die ('somethng went wrong, DB error:' ..mysql_error() ); }
The function can only be run if you call it in one of your scripts, when the database is needed. The user has no way of calling the function or seeing the code, so there shouldnt be any security risks at all. Darren

« previous php.general (#256688) next »