Posted by Skijor on 12/10/06 17:43

I just finished writing my first php script that manipulates a simple
shopping cart on a mySql database. I started with an example I found
on the web. The example hardcodes the database server, name, user, and
password in a php include file. This file is then included in every
php script that needs access to the database.

How do I make this scheme secure? I assume this is ok as long as this
file remains inaccessible on the webserver. How to guard against
access?

[Back to original message]