Connecting to database

[millercj]

I'm looking for some security tips...

Currently I connect to my databases through a statement in a php file such as

require ('connect.php');

 

and then the contents of connect.php being

<?php
$host   = 'localhost';
$dbuser = 'xxxx'; 
$dbpass = 'xxxx';
$dbname = 'xxxx';
$connect = @mysql_connect ($host, $dbuser, $dbpass) or die ('Could not connect to MySQL!');
$select_db = @mysql_select_db ($dbname) or die ('Could not select database!');
?>

 

Is this the most secure way to connect to a database?

 

 

[priti]

This is the most opted way to connect to Db.you can also use database connection classes availabel on PHP classes or PHP freaks tutorial also if you follow OOPs in your coding approach.

 

let someone else experienced also speaks on this topic.For security issues the discussion is endless so i think someone else should also speak on this.

 

Gr8 day

[millercj]

anyone else?

[revraz]

Nothing else to add really.

[jerastraub]

This is the way that I have always seen to do a DB connect.

 

I have also seen that most people actually put it in a folder like so:

 

<?
include("inc/config.php");
?>

[bpops]

It's the way I do it.