Re: MySQL connection

hi, there are 2 ways. 1. you hardcore the user/password in the php.ini file. 2. u do a simply error checking like : <?php $connect = mysql_connect($host, $user, $pass); if(!$connect) { print "connection failed"; } ?> of course you could also do like kinda header("Location: http://host"); instead of print "connection failed". i hope i could help you. best regards attila strauss > Hey Jouri, > > > I don't agree with this one. I tested it out on my > localhost and got the two error messages I told you I > was going to get: > > Warning: Unknown MySQL Server Host... > Warning: MySQL Connection Failed... > > No usernames/passwords. I have to say however that I > always include my connect.php file. Maybe that's a > secure way to connect without anyone seeing your > password in case of sqlserver problems. > > > Greetz, > Bjorn Van Simaeys > www.bvsenterprises.com > > > > > --- BRACK <brak@nettaxi.com> wrote: > > If you have Apache and MySQL servers make this > > experiment - > > start Apache but "forget" to start SQL and go to > > your site > > http://localhost/... you will see yourself all the > > information on the > > screen. > > > > Youri > > > > On 7 Aug 2001, at 12:53, Ryan Christensen wrote: > > > > > I'm curious as to how the "hacker" would see all > > this information (the > > > username.. password, etc..) just by going to a > > site where the SQL backend > > > was down? > > > > > > Ryan > > > > > > > -----Original Message----- > > > > From: BRACK [mailto:brak@nettaxi.com] > > > > Sent: Tuesday, August 07, 2001 12:36 PM > > > > To: php-general@lists.php.net > > > > Subject: [PHP] MySQL connection > > > > > > > > > > > > I just wanned to bring the issue of security of > > MySQL connection: > > > > > > > > Let us imagine that SQL server was down for some > > hours (of > > > > course without us knowing it) and at the same > > hours our SQL site > > > > was visited by some kind of hacker, he can s ee > > on his screen all > > > > our SQL connection info like username, > > password, and database > > > > name. You may hide this information in different > > file than the file > > > > that your users open then the hacker will see > > something like > > > > "include("connect.inc");" or > > "require("connect.inc");" (of course IF > > > > server is down). So you may only imagine the > > consequences of > > > > this visit of the hacker. What can we do to > > protect our sensitive > > > > information if SQL server is down? > > > > > > > > Youri > > > > > > > > -- > > > > PHP General Mailing List (http://www.php.net/) > > > > To unsubscribe, e-mail: > > php-general-unsubscribe@lists.php.net > > > > For additional commands, e-mail: > > php-general-help@lists.php.net > > > > To contact the list administrators, e-mail: > > php-list-admin@lists.php.net > > > > > > > > > > > > > > > > > > > -- > > PHP General Mailing List (http://www.php.net/) > > To unsubscribe, e-mail: > > php-general-unsubscribe@lists.php.net > > For additional commands, e-mail: > > php-general-help@lists.php.net > > To contact the list administrators, e-mail: > > php-list-admin@lists.php.net > > > > > __________________________________________________ > Do You Yahoo!? > Make international calls for as low as $.04/minute with Yahoo! Messenger > http://phonecard.yahoo.com/ > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net >