[thelist] php settings for DB access

Andrew Maynes andrew at humanbehaviour.co.uk
Wed Aug 14 08:58:16 CDT 2002


There must be something with the refresh!  The index.html has kicked in now so
none of the files residing within that directory are showing now.

if search engines pick up these files then there is a potential security scare
for alot of sites out there.

-----Original Message-----
From: thelist-admin at lists.evolt.org
[mailto:thelist-admin at lists.evolt.org]On Behalf Of John Handelaar
Sent: Wednesday, August 14, 2002 02:50
To: thelist at lists.evolt.org
Subject: RE: [thelist] php settings for DB access


% -----Original Message-----
% From: thelist-admin at lists.evolt.org
% [mailto:thelist-admin at lists.evolt.org]On Behalf Of Ben Phillips
% Sent: 14 August 2002 13:33
% To: thelist at lists.evolt.org
% Subject: RE: [thelist] php settings for DB access
%
% > You could move the connection info outside the web document
% > tree and include it in your php scripts using an absolute path...e.g.
% >
% > Web server root is /home/httpdocs so you put config file in
% > /home/phpconfigs and your scripts
% > include('/home/phpconfigs/whatever.php');
% > NB If you have to run PHP with open_basedir and safe_mode
% > enabled then this won't work
%
% if you can't put anything outside the web document tree and you are
% using apache, then simply name the include file .whatever.php. apache
% will never send anything beginning with a . (full stop/period) afaik, so
% it can't be downloaded, but can be included.

That will work, but if the files are named *.php already, then
the real problem is that that directory isn't executing PHP
files correctly.

------------------------------------------
John Handelaar

T +44 20 8933 1494       M +44 7930 681789
F +44 870 169 7657   E john at userfrenzy.com
------------------------------------------
--
For unsubscribe and other options, including
the Tip Harvester and archive of thelist go to:
http://lists.evolt.org Workers of the Web, evolt !

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.381 / Virus Database: 214 - Release Date: 8/2/02

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.381 / Virus Database: 214 - Release Date: 8/2/02




More information about the thelist mailing list