On Thu, 01 Jul 2004 06:55:38 -0700, [EMAIL PROTECTED] (Bob Hockney) wrote: >What I am concerned about is a local user on the server machine, not access through >the web server. It sounds like it can be done if there is a separate user or group >for the >web server process, but this site specific. It would be difficult to distribute a >program >and use a generalized install routine to install the file containing the passwords to >be >edited by the site admin.
You could move the virtual host to its own file, only readable by root (and include this virtual host-file in httpd.conf). Use SetEnv in this virtual host to set values like DBUSER, DBPASS and so on: http://httpd.apache.org/docs/mod/mod_env.html#setenv You can choose whatever names you like. The PHP script would then just have to read these environment values to retrieve username and password. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php