|
Posted by cewyattjr on 07/15/06 20:08
So I'm a relative noob with PHP/MySQL. Here's my question -- seems
pretty questionable from a security standpoint to have the MySQL
connection usernames/pw's embeded in PHP scripts all over a site. Is
there a better practice? Would something like this in every page be
better:
include ("../passwordprotected/SinglefilewithPHPlogininfo.php"); ?>
Database login info is still sitting in that file in clear text, but
seems better than multiple clear-text copies all over a site. Are
there better methods?
Thanks,
Chuck
Navigation:
[Reply to this message]
|