Posted by Chris Shiflett on 02/18/05 07:12

--- ".....hG" <forums@helmutgranda.com> wrote:
> While back I read in an article that placing UN and PASSwords in a PHP
> was not secure.

Well, that's very subjective. In a shared hosting environment, it
certainly does pose a risk. If you place it within document root (don't do
that), it poses a significant risk.

My favorite method of handling this is described at the end of this
article:

http://shiflett.org/articles/security-corner-mar2004

Hope that helps.

Chris

=====
Chris Shiflett - http://shiflett.org/

PHP Security - O'Reilly HTTP Developer's Handbook - Sams
Coming Soon http://httphandbook.org/

• Next in thread: Re: [PHP] PHP security
• Prev in thread: PHP security
• Next in forum: Help with SQL statement
• Prev in forum: Re: [PHP] mysql query
• Thread view: PHP security

[Reply to this message]