note 32944 deleted from function.mysql-connect by didou

Note Submitter: j_lozinski@yahoo.co.uk ---- Another point which should be made about keeping password etc.. safe is backup files etc.. Some text editors create backups, so "mydbsettings.php" has a backup "mydbsettings.php~" or "mydbsettings.php.bak". These files can be read as text files served by Apache (possibly other web-servers) so it's a good idea to exclude those files using the .htaccess method described above or to add them as possible php extentions. also be aware that some php sources use the .php3 extention, which if you use php4 is not considered by Apache as php, therefore the .php3 files contents will also be viewable as text.. add php3 as a viable extention even if you use php4! Get in the habbit of removing any backup files! All anyone need do to gain access to your source would be to add a "~" or ".bak" if you don't set up the server configuration properly.