Re: Security problem.

Ok, so you what your are trying to secure then is the mysql database right? so only certain users have access? use the user authentication incorporated into mysql. just set up user name and passwords with different level access, and give those accounts out to the proper users so they can incorporate them into their scripts. thats about the only way you'll be able keep just anyone from accessing the db by finding the pw in their script. ----- Original Message ----- From: Anand <muthu7de@ccs.iitb.ernet.in> To: <php-general@lists.php.net> Sent: Friday, December 22, 2000 12:00 AM Subject: [PHP] Security problem. > > Hi folks! > > I am running a site on a red hat linux 6.2 machine (using apache) > on which many others have user accounts. I have built the site with php3 > and mysql. I would like only authorized people to access the database, > and so i have implemented authentication in php using passwords > stored in the mysql database. Actually the database has a single table > with each row corresponding to a particular user. The authorized people > have permissions to update the database. > > The problem is that i have written the mysql db username and password in > clear text, in the php scripts. So the users on local machine can have a > look at the scripts (which are world readable) and then connect to the database > using their own scripts and .... > > Is there any way to get around this problem? > > Thanks > Anand > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net >