Posted by C. on 05/31/07 21:50

On 31 May, 19:58, Jerry Stuckle <jstuck...@attglobal.net> wrote:
>
> It could - if they could display the code. A properly configured
> webserver will parse the code and only send the results to the browser,
> not the code.
>
> But your concern is well founded. I normally put user id's and
> passwords in an include file outside the document root.
>

See also the recent thread 'how to not write password in code for
using to mysql?'

(also at http://groups.google.co.uk/group/comp.lang.php/browse_thread/thread/20644cc69fdf0802/?hl=en#)

C.

[Back to original message]