|
|
Posted by shimmyshack on 06/20/07 23:27
On Jun 20, 7:58 pm, damezumari <jannordgr...@gmail.com> wrote:
> This did it: $command = "..\..\mysql\bin\mysqldump ...
>
> Final question in this conversation with myself :), why didn't php
> find mysqldump.exe on its own. Do I set this in php.ini?
>
> Regards,
>
> Jan Nordgreen
it has to be in the path, use the system properties window, advanced
environmental vars, to set the system path to include the path to
executables you wish apache to be able to use.
It does sound though like you have your apache being run as SYSTEM -
and so it is able to range throughout the filesystem, you might
consider locking that down a bit (if you are running xp pro) but
creating and apache user.
Also when backing up your database you dont need root permissions,
create a user which has only the right to select and lock tables for
that database, and use that to backup, then should your script leak
out, they can read but not change your database. Each database could
have a "web user" which ahs only the rights your app needs it to have
a "backup user";select, lock tables, and of course there may well be a
root account with a password (which is not the default) which is used
to administer the whols DBMS.
my $0.02 (it doesnt take much to get into the habit of this, consider
where a backup user password will be, scripts marked db_backup and
cron jobs - which might result in password being sent via email, so
its best to have users specific for the task they will perform IMHO.
Navigation:
[Reply to this message]
|