[SOLVED] best place for mysql_connect.php file?

[delphi123]

Hi there,

 

Just a general security question, I have a file with all my database username/passwords etc that I refer to with scripts, can anyone tell me what they do to ensure it's secure?

 

Does it matter if it's in the root of your server? What do you CHmod it to?  .htaccess? etc

 

Many thanks! 

[~n[EO]n~]

Generally I have seen peoples keeping their config.php (with all db details and pwd) inside includes folder. You can name it anything you want,  unless you tell others it is safe. You don't need to give write access to other folder unless it is required. 

[PFMaBiSmAd]

Files that end in .php are parsed as php code when they are browsed to. So, no one can see any php code or variable statements in them, unless you do something silly like - echo "my database password is: $password";