Question

Is it safe to use php_include file for mysql login information or is is better to copy/paste the login info for mysql on every page? If you go with php_include, how will you block that file from being seen?

Answer 1

Create a connection.php

$host   =   "localhost";  //server
$user   =   "user";  //username
$pass   =   "pass"; //password
$db =   "db1"; //database
$con    =   @mysql_connect($host,$user,$pass);  //connection
if(!$con){
  die("Could Not Connect to $host: ".mysql_error());
  } //if NOT connected force error
$db_select  =   @mysql_select_db($db);  // database connection
if(!$db_select){
  die("Could Not Select $db: ".mysql_error());
  }  //if NOT connected force error

Put this file connection.php outside your /www or /public_html folder

---

Add

require_once("../whereeverthismaybe/connection.php");

as the first line on every page you need it for.

-jt