Re: Best authentication method for user

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I suppose that this config file should be included in all PHP file via
include command.
is it true ?

On 4/3/06, chris smith <dmagick@xxxxxxxxx> wrote:
>
> On 4/3/06, Alain Roger <raf.news@xxxxxxxxx> wrote:
> > ok, but how to make a non-logged user executes some stored procedures or
> > Queries ?
> > MySQL will need some login and password for that.
> >
> > so, that's why i've asked such question...how and where to store this
> > non-logged user's info (login, password) to not make physical user type
> them
> > ? (this must be secured enough)
>
> A config file:
>
> <?php
> define('DB_USER', 'xxx');
> ......
> ?>
>
> You don't want to make your users know your database details!
>
> > On 4/3/06, Ligaya Turmelle <lig@xxxxxxxxxx> wrote:
> > >
> > >
> > > > For that i was thinking to use session and register his login and
> > > password
> > > > as session variable.
> > >
> > > > What do you think about that ?
> > > >
> > > I personally would only hold a password for as long as it is needed to
> > > log them in.  Then I'd set a session var that they have logged in and
> > > another session var for their level of access.
> > >
> > > But that's me.
> > >
> > >
> > > --
> > >
> > > life is a game... so have fun.
> > >
> > >
> > >
> >
> >
>
>
> --
> Postgresql & php tutorials
> http://www.designmagick.com/
>

[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux