Comments on: How easy is it for someone to download a php file from a website?

By: ryan n

ryan n — Sat, 04 Jul 2009 12:55:09 +0000

don’t put your db config file inside your public folder. For example, if your web root directory is "www", then have a "config" folder at the same level – . outside of your web root.

Also you should be able to deny access to any of your public files by using a .htaccess file.

Report this comment

By: AdamBeaz

AdamBeaz — Sat, 04 Jul 2009 12:55:09 +0000

you may want to consider creating a separate db-connex.php file (or whatever name) and putting it in a random named folder and have an include statement pull it in before connecting to the database. This way you can put all of you DB username and DB passwords in that file as variables and only allow server sided includes in yourt php.ini
Also add a little security to that folder and you should be just fine.

Comments on: How easy is it for someone to download a php file from a website?

By: ryan n

By: AdamBeaz

By: bangali