[olug] protecting MySQL password on multi-user system

Phil Brammer olug at wjjeep.com
Tue Apr 25 04:48:01 UTC 2006


On Mon, Apr 24, 2006 at 09:38:05PM -0500, Eric P wrote:
> I'm on a multi-user Linux system running PHP and MySQL.
> 
> Whenever I do an SQL query, I include a file just under the web root w/the MySQL username and password.
> 
> Even though it's under the web root, I have to keep this file's permission at 644 permissions, or else I get 'permission
> denied'.
> 
> Am I missing something here?  I definately don't want this file readable by 'other'.
> 
> Any advice for the correct approach to this would be greatly appreciated!
> 
> Eric Pierce

Who owns the file and what group does the file belong to?

Phil



More information about the OLUG mailing list