note 19914 deleted from function.mysql-connect by philip
| From: | philip@php.net | Date: | Fri, 24 May 2002 15:24:42 +0000 |
| Subject: | note 19914 deleted from function.mysql-connect by philip | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-30989@lists.php.net to get a copy of this message | ||
reply to _/_/_/_/ Connection Hint _/_/_/_/
I believe anyone who able to login to the server, can use this statment
include('/home/someone/connection.php');
to connect to someone's database and do anything he wants to.
I find it is a big problem to me, as I must have a file to store my username and password in order
to login to database, and the worst thing is, the file must be world-readable.
Is there any method to protect the password? Thanks.