Posted by Hover kraft on 05/05/06 23:33

Hello,

I'm new at PHP, been doing HTML for a while, but now integrating some php
scripts.

I notice that some php scripts I'm using contain passwords or email
addresses, database login info etc. These are not in a cgi-bin, but are in
the root web folder or folders under that.

I'm wondering: How secure are these bits of information from prying eyes?

My understanding is that PHP is executed server-side, and will only "write"
to a browser what it is told to "write".

but, otherwise, can php files in the root web folder be read or retrieved by
the general public? would this be more of a CHMOD or HTACCESS issue?

thanks for any pointers...

Doug

[Back to original message]