RE: [PHP] Opinion on a method....

2003-04-04 Thread John W. Holmes
> Reason I'm not using an include is simple. The file does not contain any > variables, it just has a line of text that is & delimited. I guess I was > just looking at the include() method as insecure. I can see how it > wouldn't > be now. Why not create your .ini file in the same format as php

RE: [PHP] Opinion on a method....

2003-04-04 Thread Dan Joseph
ks to everyone! -Dan Joseph -Original Message- From: Jon Haworth [mailto:[EMAIL PROTECTED] Sent: Friday, April 04, 2003 3:08 PM To: [EMAIL PROTECTED] Subject: RE: [PHP] Opinion on a method Hi Dan, > the ini file looks like: hostip&user&password&databasename > after

RE: [PHP] Opinion on a method....

2003-04-04 Thread Jon Haworth
Hi Dan, > the ini file looks like: hostip&user&password&databasename > after I import it, I split it up, and assign each to a variable > name. I also have it outside the doc root, and it gives a > generic error msg for every error in the system. Should do it - it's a bit of a long-winded route, t

Re: [PHP] Opinion on a method....

2003-04-04 Thread Kevin Stone
- Original Message - From: "Jon Haworth" <[EMAIL PROTECTED]> To: "Dan Joseph" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Friday, April 04, 2003 12:19 PM Subject: RE: [PHP] Opinion on a method > Hi Dan, > > > I would like to g

RE: [PHP] Opinion on a method....

2003-04-04 Thread Bryan Lipscy
:[EMAIL PROTECTED] Sent: Friday, April 04, 2003 11:18 AM To: [EMAIL PROTECTED] Subject: RE: [PHP] Opinion on a method Ahh, good thought. I also have it outside the web site directory tree. -Dan Joseph -Original Message- From: Bryan Lipscy [mailto:[EMAIL PROTECTED] Sent: Friday

RE: [PHP] Opinion on a method....

2003-04-04 Thread Dan Joseph
ated, or not). Should this do it? -Dan Joseph -Original Message- From: Jon Haworth [mailto:[EMAIL PROTECTED] Sent: Friday, April 04, 2003 2:20 PM To: Dan Joseph; [EMAIL PROTECTED] Subject: RE: [PHP] Opinion on a method Hi Dan, > I would like to get some opinions here on a m

Re: [PHP] Opinion on a method....

2003-04-04 Thread CPT John W. Holmes
> I would like to get some opinions here on a method I'm doing to grab connect > information for a mysql connection. > > Currently I am doing: $pinfo = fopen ("/director1/directory2/filename.ini", > "r"); > > I'm looking for a more secure method of doing this. Is XML a solution? Is > there somethi

RE: [PHP] Opinion on a method....

2003-04-04 Thread Jon Haworth
Hi Dan, > I would like to get some opinions here on a method I'm doing > to grab connect information for a mysql connection. Currently > I am doing: > $pinfo = fopen ("/director1/directory2/filename.ini","r"); Does this filename.ini contain the code to connect to your database? If so, I usually

RE: [PHP] Opinion on a method....

2003-04-04 Thread Dan Joseph
Ahh, good thought. I also have it outside the web site directory tree. -Dan Joseph -Original Message- From: Bryan Lipscy [mailto:[EMAIL PROTECTED] Sent: Friday, April 04, 2003 2:14 PM To: 'Dan Joseph'; [EMAIL PROTECTED] Subject: RE: [PHP] Opinion on a method

RE: [PHP] Opinion on a method....

2003-04-04 Thread Bryan Lipscy
Put the connect info into a php file (i.e. connect.php). If it is ever directly accessed by the client the PHP engine will render a blank page. If your ini file is ever accessed by the client it will render the contents of the ini file. Wonder if removing rwx would adversly affect includes to th