RE: [PHP] MySQL connection

If you have Apache and MySQL servers make this experiment - start Apache but "forget" to start SQL and go to your site http://localhost/... you will see yourself all the information on the screen. Youri On 7 Aug 2001, at 12:53, Ryan Christensen wrote: > I'm curious as to how the "hacker" would see all this information (the > username.. password, etc..) just by going to a site where the SQL backend > was down? > > Ryan > > > -----Original Message----- > > From: BRACK [mailto:brak@nettaxi.com] > > Sent: Tuesday, August 07, 2001 12:36 PM > > To: php-general@lists.php.net > > Subject: [PHP] MySQL connection > > > > > > I just wanned to bring the issue of security of MySQL connection: > > > > Let us imagine that SQL server was down for some hours (of > > course without us knowing it) and at the same hours our SQL site > > was visited by some kind of hacker, he can see on his screen all > > our SQL connection info like username, password, and database > > name. You may hide this information in different file than the file > > that your users open then the hacker will see something like > > "include("connect.inc");" or > > "require("connect.inc");" (of course IF > > server is down). So you may only imagine the consequences of > > this visit of the hacker. What can we do to protect our sensitive > > information if SQL server is down? > > > > Youri > > > > -- > > PHP General Mailing List (http://www.php.net/) > > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > > For additional commands, e-mail: php-general-help@lists.php.net > > To contact the list administrators, e-mail: php-list-admin@lists.php.net > > > > >