[RESOLVED] downloading connections files

[shifty18]

I was just thinking. In Dreamweaver, if you make a conneciton to a DB it puts the file in Connections/SiteName.php. So I though Google spiders the web so couldnt we just do an allinurl search for somehting like www../Connections/*.php or something along those lines to search for all of the sites connection pages that havn't changed the names of the files.

Once a file has been found you could open up something like notepad do

<a href = "www.something.dom/Connections/something.php">go</a> saveit as HTML and then open it up and right click the link and save it to your desktop

would this work to get the connections file and is it a security risk

Just a question
Chris

[thorpe]

not famliar with dreamweaver, so im not sure what this connections file contains, but i'll assume it is your password/ username etc.

php is rendered on the server so by the time you got it as html, it would be a blank page. unless of course you had something silly like.

echo $host.$user.$pass

[shifty18]

yeah its simple a file you include taht contains that. Yeah i guess you would never see if even if you did download the file, ok well that isnt a risk then was just a thought

[piersk]

Generally the Connections folder only has variables in it and doesn't echo anything to the browser. Therefore, anything sent to the browser will not contain any information about your db connection.

I wouldn't worry about it

[LoganK]

It's the same thinking process as a config.php which you include on every page - it's PHP-processed, so it can't be saved in it's "natural state".

[shifty18]

yeah, after a little search for it all i got back was db errors to say need password etc etc so overal, nothing to worry about

[LoganK]

Good.

Please mark this as resolved!