|
|
Posted by "Lawrence Kennon" on 07/18/05 13:53
In my current hosting situation I don't have the ability to store my file
that contains MySQL userids/passwords in a subdirectory that is not under
the server root. In order to protect it from being included from a foreign
host I thought up this scheme of using the php_uname function to check that
it is running on the correct host. Does this look reasonably secure? I am
not hosting any kind of store, or terribly sensitive data - it will only be
a bulletin board.
This is the format of my datadef.php file which will be included in my php
scripts that access the MySQL database.
<?php
$host = php_uname('n');
if (($host == 'devhost') || ($host == 'prodhost'))
{
define ('DB_USER', 'username');
define ('DB_PASSWORD', 'password');
define ('DB_HOST', 'localhost');
define ('DB_NAME', 'dbname');
}
else
{
exit();
}
?>
Thanks for your comments,
Lawrence Kennon
Navigation:
[Reply to this message]
|