connecting to seperate mySQL server through PHP

We currently have our mySQL server on the same box as the Apache
server.
For security and load balancing, we're going to be moving the mySQL
server to another box.
We're already using a single included connection file in all of our PHP
pages that has the server, username, password line that connects to the
database.

Aside from changing "localhost" to the IP/port number of the new
server, what else should be done, especially in the security sense?
If someone were to hack and be able to get access to view files, they
could open that file and see the username/password. Is there some way
to encrypt it or something?
So far the only thing I can think of to help limit that file's exposure
is to place it outside the /var/www/htdocs folder region. And of course
make sure the mySQL account it's connecting to has only the mySQL
permissions it needs.

Thanks for any advice!
Liam

.

Relevant Pages

  • [UNIX] Confixx Vulnerability Allows Attacker Remote Control of the SQL Server
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... control the server. ... A security vulnerability in Confixx allows attackers to execute commands ... the user "-e" on your MySQL server). ...
    (Securiteam)
  • RE: [PHP] "cannot load mysql extension" - PHP Installation on Vista/Apache
    ... I'm using native mySQL btw, ... 'tight security' as a strive from the developpers to have a good security ... Learn how to setup a server on a unix system, ... cus they have no fans on em so make no noise;) and install a linux distrib ...
    (php.general)
  • RE: MySQL/PHPMyAdmin on FC3 Connection Problem
    ... // You can disable a server config entry by setting host to ''. ... MySQL server ... MySQL control user settings ... table to describe the display fields ...
    (Fedora)
  • Re: ms exchange security
    ... > server IP as well as the format of the username accounts. ... Sure but most good security people put restrictions on passwords. ...
    (comp.security.misc)
  • Re: Using Access for web application?
    ... Any suggestions as to which newsgroup would be more ... The server that the web app will use in this case, ... > which technology you will decide to use as the Web server (Linux or Windows) ... Instead MySQL is being ...
    (microsoft.public.access.dataaccess.pages)