php & mysql password dilemma

[ree]

Whats the best way to store passwords for MySQL databases on a webserver?

Should you store it in the php file ? or another text file ?

should you search for the value in the file or just include it ?

[Maciej Milczarek]

ree wrote:

Whats the best way to store passwords for MySQL databases on a webserver?

Should you store it in the php file ? or another text file ?

should you search for the value in the file or just include it ?

I think You should store it in the php file, then just include it.

maciek

[FLEB]

Regarding this well-known quote, often attributed to Maciej Milczarek's
famous "Thu, 18 Dec 2003 01:15:12 +0100" speech:

ree wrote:

Whats the best way to store passwords for MySQL databases on a webserver?

Should you store it in the php file ? or another text file ?

should you search for the value in the file or just include it ?

I think You should store it in the php file, then just include it.

maciek

Just make sure it's in a file that's absoutely, positively going to get
parsed by PHP (and not output as text or HTML). Use "filename.inc.php", or
better yet, just "filename.php", *not* "filename.inc" for the include file.

--
-- Rudy Fleminger
-- [e-mail]
(put "Hey!" in the Subject line for priority processing!)
-- http://www.pixelsaredead.com

[Tim Van Wassenhove]

On 2003-12-17, ree <re*@hotmail.coom> wrote:

Whats the best way to store passwords for MySQL databases on a webserver?

Should you store it in the php file ? or another text file ?

should you search for the value in the file or just include it ?

Put the data in, let's say: config.inc.php

Make sure to put it outside your "public_html" directory.
This way, if apache or php breaks, they still can't browse to the file.

--
verum ipsum factum