note 23438 deleted from function.require by didou
| From: | didou@php.net | Date: | Mon, 18 Aug 2003 13:27:20 +0000 |
| Subject: | note 23438 deleted from function.require by didou | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-54583@lists.php.net to get a copy of this message | ||
Note Submitter: elanthis at awesomeplay dot com
----
For everyone trying to hide their database passwords, realize that if you're on a shared
hosting system, you are screwed no matter what. Because, obviously, the webserver can read your
password file, and on shared hosting, other users' scripts run as the web server user as well.
Meaning they can easily write a Perl or PHP script to look into your directory and read your
password file. PHP settings have a way to disable this, but the web server will still likely handle
Perl/Ruby scripts or even C compiled CGI programs, which can do the same thing.