Is there a way to avoid having the DB password (and/or ID for that matter)
clear in config.php?
clear in config.php?
-
-
Re: phpBB2 - Clear text password in config.php
Hercule Poirot wrote:
[color=blue]
> Is there a way to avoid having the DB password (and/or ID for that matter)
> clear in config.php?[/color]
1: place it outside document root
2: use include with a full path to pull it in (or add the directory to
the library path).
That way if the web server isn't configured properly and php scripts
aren't executed the include will not work.
-
Re: phpBB2 - Clear text password in config.php
"Hercule Poirot" <blah@blah.co m> wrote in message
news:106o5k3mbt av99e@news.supe rnews.com...[color=blue]
> Is there a way to avoid having the DB password (and/or ID for that matter)
> clear in config.php?[/color]
On a shared server, the database password should be set in httpd.conf for it
to be safe from other users (and httpd.conf needs to be restricted to root
access only).
Comment
Comment