Posted by David on 12/10/06 18:49

Skijor wrote:
> I just finished writing my first php script that manipulates a simple
> shopping cart on a mySql database. I started with an example I found
> on the web. The example hardcodes the database server, name, user, and
> password in a php include file. This file is then included in every
> php script that needs access to the database.
>
> How do I make this scheme secure? I assume this is ok as long as this
> file remains inaccessible on the webserver. How to guard against
> access?
>

you could place it outside the Document Root or within a protected
directory.

[Back to original message]