On 4/12/06, Firat KUCUK <[EMAIL PROTECTED]> wrote:
> conn = MySQLdb.connect(
>            host   = '127.0.0.1',
>            user   = 'pismikrop',
>            passwd = 'pass',
>            db     = 'db')

Unrelated to your question, but I see this a lot.  You should
not hardcode the database password in your script.  If your
script ever fails you may end up with a Python traceback, and
if PythonDebug is enabled (or you're using a framework on
top of mod_python) parts of your source code could be
dumped across the HTML output, including your password!

In web scripts, you should always read any passwords, etc.,
from some other place such as a file.

pw = open('.htdbpass','r').readline().strip()
conn = MySQLdb.connect(
            host   = '127.0.0.1',
            user   = 'pismikrop',
            passwd = pw,
            db     = 'db')
--
Deron Meranda

Reply via email to