Put the connect info into a php file (i.e. connect.php).
If it is ever directly accessed by the client the PHP engine will render
a blank page.
If your ini file is ever accessed by the client it will render the
contents of the ini file.
Wonder if removing rwx would adversly affect includes to
Ahh, good thought. I also have it outside the web site directory tree.
-Dan Joseph
-Original Message-
From: Bryan Lipscy [mailto:[EMAIL PROTECTED]
Sent: Friday, April 04, 2003 2:14 PM
To: 'Dan Joseph'; [EMAIL PROTECTED]
Subject: RE: [PHP] Opinion on a method
Put
Hi Dan,
I would like to get some opinions here on a method I'm doing
to grab connect information for a mysql connection. Currently
I am doing:
$pinfo = fopen (/director1/directory2/filename.ini,r);
Does this filename.ini contain the code to connect to your database? If so,
I usually do two
I would like to get some opinions here on a method I'm doing to grab
connect
information for a mysql connection.
Currently I am doing: $pinfo = fopen
(/director1/directory2/filename.ini,
r);
I'm looking for a more secure method of doing this. Is XML a solution?
Is
there something else?
, or not).
Should this do it?
-Dan Joseph
-Original Message-
From: Jon Haworth [mailto:[EMAIL PROTECTED]
Sent: Friday, April 04, 2003 2:20 PM
To: Dan Joseph; [EMAIL PROTECTED]
Subject: RE: [PHP] Opinion on a method
Hi Dan,
I would like to get some opinions here on a method I'm doing
:[EMAIL PROTECTED]
Sent: Friday, April 04, 2003 11:18 AM
To: [EMAIL PROTECTED]
Subject: RE: [PHP] Opinion on a method
Ahh, good thought. I also have it outside the web site
directory tree.
-Dan Joseph
-Original Message-
From: Bryan Lipscy [mailto:[EMAIL PROTECTED]
Sent: Friday
- Original Message -
From: Jon Haworth [EMAIL PROTECTED]
To: Dan Joseph [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Friday, April 04, 2003 12:19 PM
Subject: RE: [PHP] Opinion on a method
Hi Dan,
I would like to get some opinions here on a method I'm doing
to grab connect
Hi Dan,
the ini file looks like: hostipuserpassworddatabasename
after I import it, I split it up, and assign each to a variable
name. I also have it outside the doc root, and it gives a
generic error msg for every error in the system.
Should do it - it's a bit of a long-winded route, though.
Joseph
-Original Message-
From: Jon Haworth [mailto:[EMAIL PROTECTED]
Sent: Friday, April 04, 2003 3:08 PM
To: [EMAIL PROTECTED]
Subject: RE: [PHP] Opinion on a method
Hi Dan,
the ini file looks like: hostipuserpassworddatabasename
after I import it, I split it up, and assign each
Reason I'm not using an include is simple. The file does not contain
any
variables, it just has a line of text that is delimited. I guess I
was
just looking at the include() method as insecure. I can see how it
wouldn't
be now.
Why not create your .ini file in the same format as php.ini
10 matches
Mail list logo
