Connecting Tech Pros Worldwide Forums | Help | Site Map

phpBB2 - Clear text password in config.php

Hercule Poirot
Guest
 
Posts: n/a
#1: Jul 17 '05
Is there a way to avoid having the DB password (and/or ID for that matter)
clear in config.php?



Kevin Thorpe
Guest
 
Posts: n/a
#2: Jul 17 '05

re: phpBB2 - Clear text password in config.php


Hercule Poirot wrote:
[color=blue]
> Is there a way to avoid having the DB password (and/or ID for that matter)
> clear in config.php?[/color]

1: place it outside document root
2: use include with a full path to pull it in (or add the directory to
the library path).

That way if the web server isn't configured properly and php scripts
aren't executed the include will not work.
Chung Leong
Guest
 
Posts: n/a
#3: Jul 17 '05

re: phpBB2 - Clear text password in config.php


"Hercule Poirot" <blah@blah.com> wrote in message
news:106o5k3mbtav99e@news.supernews.com...[color=blue]
> Is there a way to avoid having the DB password (and/or ID for that matter)
> clear in config.php?[/color]

On a shared server, the database password should be set in httpd.conf for it
to be safe from other users (and httpd.conf needs to be restricted to root
access only).


Closed Thread