2,105 reputation
21649
bio website
location B.C., Canada
age 23
visits member for 2 years, 1 month
seen 2 hours ago

Jun
14
accepted Password and username used to connect to database in source code
Jun
6
comment Password and username used to connect to database in source code
So this amounts to putting the file outside of the web root folder?
Jun
5
comment Password and username used to connect to database in source code
I think I get what you're saying but to make sure let me argue against you: isn't that an obvious target to have a file db_config.php for an attacker looking for passwords? Is the idea that now there is only one file to "specially" protect, but how would this be protected more so than other files? No PHP source code files are made public so wouldn't this be the same level of security?
Jun
5
comment Password and username used to connect to database in source code
What is a configuration repository? I hardly know anything about anything you said.
Jun
5
asked Password and username used to connect to database in source code
Jun
3
asked Obtaining e-mail address at registration
May
31
awarded  Notable Question
May
31
asked How do some sites detect AdBlock Plus?
May
23
awarded  Popular Question
May
13
asked Virus with PGP Encryption Preventing Virus Scan
May
11
accepted From a security standpoint should users be asked to confirm their password when registering?
May
8
comment What precaustions should be taken when the file displayed by a webpage is specified by the GET value
I'm open to any ideas so let's talk about the database. Are you saying to make a database so that when the value for GET is abc (i.e. navigate.php?d=abc) the database would map abc to firstpage.html? Or would it make more sense to have stored in the database a list of viewable pages and if the GET value (i.e. firstpage.html) isn't on the list the page is not displayed?
May
8
asked What precaustions should be taken when the file displayed by a webpage is specified by the GET value
May
6
accepted How often should passwords change?
May
6
accepted How do browsers know which cookie to get?
May
6
accepted How can JavaScript be tampered with while viewing a web page?
May
6
accepted Avoiding Brute Force Attacks in a Web Based Login Form
May
2
awarded  Notable Question
May
1
accepted When checking a session variable to see if a user is logged in, is it enough to check to see if the variable is set?
Apr
30
reviewed Approve suggested edit on Avoiding Brute Force Attacks in a Web Based Login Form