php includes in readable directory

Path	csiph.com!newsfeed.hal-mli.net!feeder3.hal-mli.net!newsfeed.hal-mli.net!feeder1.hal-mli.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.fsmpi.rwth-aachen.de!news-1.dfn.de!news.dfn.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From	John Anderson <johnand982SPAM@gmail.com>
Newsgroups	comp.lang.php
Subject	php includes in readable directory
Date	Sun, 09 Jun 2013 10:39:17 +0100
Organization	None
Lines	13
Message-ID	<johnand982SPAM-F0D13B.10391709062013@News.Individual.NET> (permalink)
X-Trace	individual.net 4nrQaOjd3Y6WWGqxQ4mwBg9ty/6uECRn5UI8FflqqWhD7TmjTQ
X-Orig-Path	johnand982SPAM
Cancel-Lock	sha1:M7X6+fpTG/FAMCD2SLcbWdbAUMQ=
User-Agent	MT-NewsWatcher/3.5.3b3 (Intel Mac OS X)
X-No-Archive	true
Xref	csiph.com comp.lang.php:9783

Show key headers only | View raw

Hello,
I've got a website where the apache directory is available to other 
users with shell accounts: /var/www/html.

If I put something like 'db_login.php' in there with a MySQL password in 
it, and include it from index.php, then anyone with shell access will be 
able to read it.

So I move it out, but where?  Is there a 'standard' place to put stuff 
like this?  /usr/local seems too 'root-like', and I don't really want to 
put it into my $HOME, and give httpd the right to see in there.

Thanks.

Back to comp.lang.php | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

php includes in readable directory John Anderson <johnand982SPAM@gmail.com> - 2013-06-09 10:39 +0100
  Re: php includes in readable directory "J.O. Aho" <user@example.net> - 2013-06-09 12:59 +0200
  Re: php includes in readable directory Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2013-06-09 15:11 +0200
  Re: php includes in readable directory Jerry Stuckle <jstucklex@attglobal.net> - 2013-06-09 09:16 -0400
    Re: php includes in readable directory John Anderson <johnand982SPAM@gmail.com> - 2013-06-09 15:27 +0100
      Re: php includes in readable directory Denis McMahon <denismfmcmahon@gmail.com> - 2013-06-09 20:09 +0000
      Re: php includes in readable directory Jerry Stuckle <jstucklex@attglobal.net> - 2013-06-09 16:57 -0400
  Re: php includes in readable directory Fred <fr-icsr@numericable.fr> - 2013-06-09 17:44 +0200

csiph-web