note 32944 added to function.mysql-connect
| From: | j_lozinski at yahoo dot co dot uk | Date: | Wed, 11 Jun 2003 13:30:46 +0000 |
| Subject: | note 32944 added to function.mysql-connect | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-50178@lists.php.net to get a copy of this message | ||
Another point which should be made about keeping password etc.. safe is backup files etc..
Some text editors create backups, so "mydbsettings.php" has a backup
"mydbsettings.php~" or "mydbsettings.php.bak". These files can be read as text
files served by Apache (possibly other web-servers) so it's a good idea to exclude those files
using the .htaccess method described above or to add them as possible php extentions.
also be aware that some php sources use the .php3 extention, which if you use php4 is not considered
by Apache as php, therefore the .php3 files contents will also be viewable as text.. add php3 as a
viable extention even if you use php4!
Get in the habbit of removing any backup files! All anyone need do to gain access to your source
would be to add a "~" or ".bak" if you don't set up the server
configuration properly.
----
Manual Page -- http://www.php.net/manual/en/function.mysql-connect.php
Edit Note -- http://master.php.net/manage/user-notes.php?action=edit+32944
Delete Note -- http://master.php.net/manage/user-notes.php?action=delete+32944&report=yes
Reject Note -- http://master.php.net/manage/user-notes.php?action=reject+32944&report=yes