newbie question about protect password on server

[zjcboy]

I have a file containing password on the server. I want to protect it from being accessed by vistors, but I need to access in my PHP scripts. What should I do? I tried to change the atrribute of that file to make it not accessible from vistors, but, my scripts can't, either.

[Cam]

You could try putting the file above the webroot. Like when you log into your FTP there will probably be a public_html firectory or something that you put your files in. Just put the file with your password in the first directory and when you include the file in your PHP scripts, do something like this:

 require_once '../password.php'; 

[Dangermouse]

If you have this in password.php

<?php
$password = "password";
?>

Then on your other page have

<?php
include("password.php");
echo $password;
?>

If a user goes to password.php they wont be able to see anything, but when you include the script $password should be set.

[Cam]

That's very true, but if PHP dies on the server then all will be visible If possible I'd suggest storing the file abive webroot but it's really personal preference, chances of PHP crashing and not taking Apache with it are small.

[Dangermouse]

Didnt think about that