Question

I’m a newbie.

I have a php script located here /var/www/check_login.php that includes sql login information in plain text. This file is accessed to verify correct user credentials by my login page /var/www/login.php via <form name="" method="post" action="check_login.php">

I’d like to store check_login.php outside of web root directory so it cannot be accessed remotely.

How would I tell login.php to access check_login.php outside of the web root directory?

I’m guessing its not as simple as action="/var/<new folder outside of root>/check_login.php

Thanks!!

Answer 1

Move file with credentials to one level up directory and in file check_login.php

include('../credentials.php');