Re: Issue 45979: PHP code attached

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




        This is the page called
        ~~~~~~~~~~~~~~~~~~~~~~~

        <?php
        #phpinfo(); # phpinfo displays the correct info.
        #exit;

        $sqldb    = $_POST["sqldb"];
        $sqluser  = $_POST["sqluser"];
        $sqlpass  = $_POST["sqlpass"];
        $sqlhost  = $_POST["sqlhost"];

        $link = mysql_connect($sqlhost, $sqluser, $sqlpass);


    What happens if I somehow hit the page directly instead of through
    the previous page's form? There are no $_POST variables.


Then you would need to redirect the user to the form page to get the data from the user. Or create an application account that the rest of the application would use. Frankly there is no way that I would ever ask the user for the credentials, if they need different user accounts, I would create each one on the server and allow the application to control what accounts are used.

I was suggesting that was the cause of the problem (no post variables). I'd ask a user for the details during an install phase of an app, but that's it.

--
Postgresql & php tutorials
http://www.designmagick.com/


--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [PHP Users]     [Postgresql Discussion]     [Kernel Newbies]     [Postgresql]     [Yosemite News]

  Powered by Linux