Re: Best practice regarding MySQL username/pw in script file??

Thanks for all these great suggestions!


J.O. Aho wrote:
dimo414 wrote:
I agree with the suggestion to keep username/password files outside the
web root. If you cannot do this (such as scripts like PHPBB and
Coppermine) place the username/passwords inside a PHP file as varibles
which can be included in any needed scripts, this way, if someone knows
the name of the password file, and tries to view it, all they will see
is a blank screen, as the PHP was parsed and dealt with before being
sent out.


You can move the file outside the web-root too, move the file to a secure
location, create a new file with the same name in the same location and you
just add the include_once/include line to include the original configuration
file, this works fine as long as there aren't any include lines in the
original file, if there are, you need to change those to include an absolute
path to the included files instead of relative paths.


//Aho

.

Relevant Pages

  • Re: Best practice regarding MySQL username/pw in script file??
    ... Coppermine) place the username/passwords inside a PHP file as varibles ... which can be included in any needed scripts, this way, if someone knows ... location, create a new file with the same name in the same location and you just add the include_once/include line to include the original configuration file, this works fine as long as there aren't any include lines in the original file, if there are, you need to change those to include an absolute path to the included files instead of relative paths. ...
    (alt.php)
  • Re: Gordian knot with File::Find
    ... > However, I'd prefer relative paths, but if I change the original find to ... I used find2perl to create scripts for me using: ... All three cases search the whole directory tree. ...
    (comp.lang.perl.modules)
  • Re: Database password security
    ... No one is able to call scripts out of context, ... strange results and error messages. ... >because apache will parse the php file before it is sent. ... "forgets" to parse a file. ...
    (comp.lang.php)
  • Re: Multiplatform scripts: Can I avoid os.sep?
    ... I am developing scripts that must run on both Linux and windows. ...
    (comp.lang.python)
  • Re: variables and sensitive info
    ... > this in any other php file on the site, ... $mysite = New Website; ... > the different scripts in this method? ...
    (alt.php)