Quote:
|
Originally Posted by johalber
if someone uses Getright or something like that they can still get the file and then get the password. right?
|
Not right
PHP do not display the contents when accessed via a browser. Also, if you do manage to download a PHP file with a download manager such as getright the file will simply be blank. A config file with your database connection typically contains no html whatsoever - so you will recieve a blank file. Overall mySQL is very safe, providing you keep your passwords safe.