note 19914 added to function.mysql-connect
| From: | kitson at yeeo dot com | Date: | Thu, 14 Mar 2002 22:58:34 +0000 |
| Subject: | note 19914 added to function.mysql-connect | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-27809@lists.php.net to get a copy of this message | ||
reply to _/_/_/_/ Connection Hint _/_/_/_/
I believe anyone who able to login to the server, can use this statment
include('/home/someone/connection.php');
to connect to someone's database and do anything he wants to.
I find it is a big problem to me, as I must have a file to store my username and password in order
to login to database, and the worst thing is, the file must be world-readable.
Is there any method to protect the password? Thanks.
--
http://www.php.net/manual/en/function.mysql-connect.php
http://master.php.net/manage/user-notes.php?action=edit+19914
http://master.php.net/manage/user-notes.php?action=delete+19914
http://master.php.net/manage/user-notes.php?action=reject+19914