[olug] protecting MySQL password on multi-user system

Phil Brammer olug at wjjeep.com
Mon Apr 24 23:48:01 CDT 2006


On Mon, Apr 24, 2006 at 09:38:05PM -0500, Eric P wrote:
> I'm on a multi-user Linux system running PHP and MySQL.
> 
> Whenever I do an SQL query, I include a file just under the web root w/the MySQL username and password.
> 
> Even though it's under the web root, I have to keep this file's permission at 644 permissions, or else I get 'permission
> denied'.
> 
> Am I missing something here?  I definately don't want this file readable by 'other'.
> 
> Any advice for the correct approach to this would be greatly appreciated!
> 
> Eric Pierce

Who owns the file and what group does the file belong to?

Phil


More information about the OLUG mailing list