Keeping PHP Database Passwords Secure

[edge92]

Hi, I'm by no means any expert PHP user. As the title says, I need to save important information, namely my MySQL Database Password in a secure manner somehow. I've looked all around for clues to do this, some things that I found were using config files but I don't know much about them and I couldn't find anything on them here or anywhere else. This is really important to me, so any help on this issue would be very much appreciated. Thanks.

[MadTechie]

most people store the database host/username/password in a config.php file

ie

<?php
$DB_HOST="localhost";
$DB_USER="root";
$DB_PASS="password";

?>

 

then include that file whenever they use the database and instead of retyping the password they use $DB_PASS,

 

now as the config.php is a php file its parse by the server so the end user can not see that password

 

as for storing members password IN a database, well personally i use MD5+SALT.. more detail if you need it

[edge92]

Wow thanks for the fast response. That seems to clear up what I was wondering about. And yes I read about hash's and salts earlier I'll definitely take your advice. Anyways, thanks again, I'll see how it goes.