Re: [PHP] Placing the masterpassword

2011-11-03 Thread tamouse mailing lists
On Tue, Nov 1, 2011 at 8:24 AM, Florian Müller wrote: > > Hi all > I got a little question about a good application design in PHP. > If I use a mysql connection for example, I have to store my mysql-password > somewhere in the code. If it's just in the mysql-class, that's not that good, > becaus

Re: [PHP] Placing the masterpassword

2011-11-01 Thread Jim Giner
> > I store things like this in a file above the document root - so not > grabbable by URL. > Don't store it in the code ... you then end up with the password stored in > several > places & then difficult to change. > > -- > Alain Williams > Linux/GNU Consultant - Mail systems, Web sites, Networ

Re: [PHP] Placing the masterpassword

2011-11-01 Thread Alain Williams
On Tue, Nov 01, 2011 at 02:24:05PM +0100, Florian Müller wrote: > > Hi all > I got a little question about a good application design in PHP. > If I use a mysql connection for example, I have to store my mysql-password > somewhere in the code. If it's just in the mysql-class, that's not that good,

[PHP] Placing the masterpassword

2011-11-01 Thread Florian Müller
Hi all I got a little question about a good application design in PHP. If I use a mysql connection for example, I have to store my mysql-password somewhere in the code. If it's just in the mysql-class, that's not that good, because if somebody changes the functionality, he'd see it. I also can't