Re: MYSQL and PHP

["Ed J. Aivazian" <stealth () arminco com>]

Hello John,
If you already did .inc files and the ARE in the document_root of your
filesystem tree and you find it boring to change everything, it's a
good practice to have a .htaccess file shipped with your application
with something like
<Files "*.inc">
        Order allow,deny
        Deny from all
</Files>
in it.
The only thing you should worry about in this case is that the
webserver will actually take the .htaccess from your document_root
into account.

Monday, May 15, 2006, 11:07:57 PM, you wrote:

JM> Hi,

JM> First off i'm not a PHP programmer but I would like to
JM> know the following: 

JM> Is it standard to use INC files to store MYSQL db
JM> connections settings (username and password)? 

JM> What else could you do to make this "safer" ?

JM> I presume Apache looks for files with extention
JM> "*.INC" and does not processes them, right ?

JM> Thanks you

JM> __________________________________________________
JM> Do You Yahoo!?
JM> Tired of spam?  Yahoo! Mail has the best spam protection around 
JM> http://mail.yahoo.com 

JM> -------------------------------------------------------------------------
JM> Sponsored by: Watchfire

JM> Watchfire named worldwide market share leader in web application security
JM> assessment by leading market research firm. Watchfire's AppScan is the
JM> industry's first and leading web application security testing suite, and
JM> the only solution to provide comprehensive remediation tasks at every 
JM> level of the application. See for yourself. 
JM> Download a Free Trial of AppScan 6.0 today!

JM> https://www.watchfire.com/securearea/appscansix.aspx?id=701300000007t9c
JM> --------------------------------------------------------------------------



-- 
Best regards,
 Ed                            mailto:stealth () arminco com


-------------------------------------------------------------------------
Sponsored by: Watchfire

Watchfire named worldwide market share leader in web application security 
assessment by leading market research firm. Watchfire's AppScan is the 
industry's first and leading web application security testing suite, and 
the only solution to provide comprehensive remediation tasks at every 
level of the application. See for yourself. 
Download a Free Trial of AppScan 6.0 today!

https://www.watchfire.com/securearea/appscansix.aspx?id=701300000007t9c
--------------------------------------------------------------------------