PHP auction requires readable passwords file

[leehinkleman]

A free PHP auction script, using MySQL, requires the username and password for the database to be readable from a settings.php file.
The username and password combination are the same for the domain, and for the database.
Does that apparent exposure look like a potential problem and, if so, how can it be made more secure?
Thanks for your help.

 

[4x4uk]

Put the username and password info in a separate php file called for example connect.php
<?php
$dbname=&quot;databasename&quot;
$dbserv=&quot;server&quot;;
$uname=&quot;username&quot;;
$upass=&quot;userpassword&quot;;
?>

in the scripts where db connection is needed put the following

require(&quot;connect.php&quot;

It's not a lie if you believe it!

http://www.ne4x4.org.uk/

|

http://www.ne4x4.org.uk/Ian/

|

http://www.ne4x4.fsnet.co.uk/beck/