Re: SQLite security
| From: | George Schlossnagle | Date: | Mon, 23 Aug 2004 20:34:18 +0000 |
| Subject: | Re: SQLite security | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-12316@lists.php.net to get a copy of this message | ||
On Aug 23, 2004, at 4:04 PM, Chris Shiflett wrote:
--- Adam Q <aqsalter@westnet.com.au> wrote:To beat the point into the ground, if you put your mysql datafiles in your docroot, anyone can compromise those too, irregardless of your database password. GeorgeThe database needs a password.... otherwise it is just too much of a security risk.Based on my observation of the conversation you've been having, I think you might be making things too complex on yourself. This database is just a file. So, think of having a file named database.txt, and then think about how you would secure the data therein.