MySQL connection
| From: | BRACK | Date: | Tue, 07 Aug 2001 19:35:58 +0000 |
| Subject: | MySQL connection | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-61685@lists.php.net to get a copy of this message | ||
I just wanned to bring the issue of security of MySQL connection:
Let us imagine that SQL server was down for some hours (of
course without us knowing it) and at the same hours our SQL site
was visited by some kind of hacker, he can see on his screen all
our SQL connection info like username, password, and database
name. You may hide this information in different file than the file
that your users open then the hacker will see something like
"include("connect.inc");" or "require("connect.inc");" (of
course IF
server is down). So you may only imagine the consequences of
this visit of the hacker. What can we do to protect our sensitive
information if SQL server is down?
Youri