If the users dont have access via ftp to your htm-doc's but only see the result in browser, you have no problems in having the MySQL-password in the php-section of the login-doc.
The users will never see the php-part of the doc, because it's a server-side part and will only produce the html-code you want it to produce. If your users have ftp-access to docs, you have a problem. Yours Henning Dennis Peyerl wrote: > Hello > > I want to realize the following thing: > A user shall be able to connect through a php-website into mysql. I > have a form with to input types (standard html). The two input types > are text and password. > I don't know how to use that, to log a user in. Do I have to create a > special table for all the users and then compare the two entries with > the appropriate inside my table (for that I would need a special user > taht connects to mysql, just to look if users exist and passwords match)? > Or do I have to create a lot of database-users and the php-script (e.g > mysql_pconnect) uses the entries from the form? > > I don't know what is safe. I would like to get a good document that I > can read about that. > Thanks in advance > > dcp > > > > --------------------------------------------------------------------- > Before posting, please check: > http://www.mysql.com/manual.php (the manual) > http://lists.mysql.com/ (the list archive) > > To request this thread, e-mail <[EMAIL PROTECTED]> > To unsubscribe, e-mail > <[EMAIL PROTECTED]> > Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php > > --------------------------------------------------------------------- Before posting, please check: http://www.mysql.com/manual.php (the manual) http://lists.mysql.com/ (the list archive) To request this thread, e-mail <[EMAIL PROTECTED]> To unsubscribe, e-mail <[EMAIL PROTECTED]> Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php