Re: [PHP] access to DB and security

2006-11-08 Thread Satyam
- Original Message - From: "Alain Roger" <[EMAIL PROTECTED]> To: "PHP General List" Sent: Wednesday, November 08, 2006 9:22 PM Subject: Re: [PHP] access to DB and security Hi Satyam, if i understood well, in this special hidden (from web) folder, you writ

Re: [PHP] access to DB and security

2006-11-08 Thread Alain Roger
Hi Satyam, if i understood well, in this special hidden (from web) folder, you write an include file, where you only return an opened connection... something like $db (where $db =mysql_connect("$host", "$user", "$user_pwd",false,CLIENT_MULTI_STATEMENTS) ; for example) and only this $db open conne

Re: [PHP] access to DB and security

2006-11-08 Thread Satyam
- Original Message - From: "Alain Roger" <[EMAIL PROTECTED]> Hi, My web hoster gave me a login and password with which i can connect to DB, perform some actions as DB owner / superuser just for my DB. If i use this login + password to connect and perform some actions from my web pages

Re: [PHP] access to DB and security

2006-11-08 Thread Richard Lynch
On Wed, November 8, 2006 11:05 am, Alain Roger wrote: > My web hoster gave me a login and password with which i can connect to > DB, > perform some actions as DB owner / superuser just for my DB. > If i use this login + password to connect and perform some actions > from my > web pages, everybody c

[PHP] access to DB and security

2006-11-08 Thread Alain Roger
Hi, My web hoster gave me a login and password with which i can connect to DB, perform some actions as DB owner / superuser just for my DB. If i use this login + password to connect and perform some actions from my web pages, everybody can hack my DB and do what they want. My web hoster will not