Newbie Help Wanted

[jlsports]

HI,

I am new to PHP and MYSQL(1 WEEK) and I am trying to build an applicatation and everything is going good so far and things are working the way I want them to. I have a question right now and will probably have a ton more soon. My first question is security into my MYSQL data-bases. When use PHP to connect to my data-bases I need to include the user name and password. I was just wondering if somebody can grab this information and then get access to my data-bases?

Also, I was wondering if anybody here would be willing to test what I have available when it is done to help my located holes in my security. Basicly I don't want the data in the data-base to be compromised since it is for a contest where users need to make daily selections.

Any help would be appreciated.

Jason
SportsBettingWire.com

[Hatch]

As far as your username and password in the PHP script they can't get to that through the web browser because the script is stored on your backend server where all the code is executed and then the output is the only thing users can see through the web browser (like HTML code). So all the PHP code stays on the backend server.

Now as far as breaking into it or what-not I'm not sure.

[tomhath]

There have been some good discussions of this. Hit the "search" button in the upper right corner of this page and search for keywords "security mysql password", or other keywords when you have other questions. It's usually faster to find an earlier thread then wait for a new one to unfold 😉