Re: Security problem.

Anand wrote: > The problem is that i have written the mysql db username and password in > clear text, in the php scripts. So the users on local machine can have a > look at the scripts (which are world readable) and then connect to the > database using their own scripts and .... > > Is there any way to get around this problem? -forbid read-access to others on this file, so it isn't world readable any more -use chgrp to "give" that file to a certain group (create one) -add user wwwrun (apache runs as this user by default) to that group Now the apache should still have access to that file cause of being in the right group, while the other users shouldn't. And they won't get into that group except by getting root-access or by guessing the password you set for that group. regards Wagner -- If you can't learn to do something well, learn to enjoy doing it poorly.