PHP: protect folder "connections" on server?

Question

Hi,

I'm afraid this is a newbie question, but I couldn't find the
answer by searching the forum.

I installed locally, not on the shared webserver, IIS, PHP
and MySQL. Then I went through the first part of "record store"
tutorial 
from the Dreamweaever Development Centre. I realized, DW is
storing the login information to the mySQL database in a .php file
within the folder "connections". Username and password are visible
in this file:

$hostname_RecordStorePHP = "localhost";
$database_RecordStorePHP = "RecordStorePHP";
$username_RecordStorePHP = "username";
$password_RecordStorePHP = "password";

After working on this tutorial, I want to create a new
database application. First locally. Then I want to transfer the
project to my shared webserver at Godaddy. I will change hostname,
database, username and password to the MySQL database at the shared
webserver.

My question: How should I protect the user information within
the folder "connections" on the shared webserver (Linux)? I know
chmod and .htaccess for protection on Linux servers. Should I use
one of those? If chmod is ok, how should I set the permissions to
restrict access from outside, but to allow the php files on the
webserver to connect to the database?

I couldn't find a tech paper covering this issue, so I hope,
someone here can help...

Thank you very much!

Regards, 
Thomas

Newsgroup_User · Answer

thomas2322 wrote:> My question: How should I protect the user informationwithin the folder > "connections" on the shared webserver (Linux)? You don't need to. The code is entirely in PHP, which remainson the server. If anybody tries to access that file on its own, theywill see a blank page. However, if you're particularly worried, oneprecaution that you can take is to move the connections file to a folderoutside the site root. I don't know if Godaddy provides you with aprivate folder, but you can move the connection details there, and update therelative link in the include command of each page to point to theprivate folder.-- David Powers, Adobe Community ExpertAuthor, "Foundation PHP for Dreamweaver 8" (friends of ED)Author, "PHP Solutions" (friends of ED)http://foundationphp.com/

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.