RE: [PHP-DB] database password

2007-04-03 Thread Bastien Koert
store your password/access credentials outside the web root and use php to read the data in. Another alternative is to wrap those items in a function and check the calling source to make sure its only your application hth Bastien From: Roberto Mansfield [EMAIL PROTECTED] To:

Re: [PHP-DB] database password

2007-04-03 Thread Roberto Mansfield
Bastien Koert wrote: store your password/access credentials outside the web root and use php to read the data in. This is good for web attacks, but I'm thinking of an account break in where someone is accessing files directly on the server. Another alternative is to wrap those items in a

Re: [PHP-DB] database password

2007-04-03 Thread Stut
Roberto Mansfield wrote: Bastien Koert wrote: store your password/access credentials outside the web root and use php to read the data in. This is good for web attacks, but I'm thinking of an account break in where someone is accessing files directly on the server. I suggest you think about

Re: [PHP-DB] database password

2007-04-03 Thread Roberto Mansfield
Stut wrote: Roberto Mansfield wrote: Bastien Koert wrote: store your password/access credentials outside the web root and use php to read the data in. This is good for web attacks, but I'm thinking of an account break in where someone is accessing files directly on the server. I suggest