|
Posted by d on 09/25/52 11:37
"Fernando Rodrνguez" <frr@easyjob.net> wrote in message
news:a33bd84136438c7ea43a458a6ef@news.supernews.com...
>
> Hi,
>
> In a php script, I have to connect to a remote mysql database. I'm a bit
> worried that some user might be bale to retrieve the source of the page
> and see the user name and password to connect to the db.
>
> Is this resonable? What's the best way to avoid it?
Put the script somewhere outside the web root, and make sure only the user
the script is running under has read access to it. If someone can get to it
then, the DB information getting leaked is the least of your worries.
> Thanks
>
>
[Back to original message]
|