Take the tour ×  As my server is getting a bit bigger, and more
users are getting access to it, I don't want them to see the
password that MySQL is using to connect to PHP, which is stored
in my 'connect.php' file and required by every page. However, it
is just sitting in the same directory as the rest of the php
files.  I've considered using a second 'connect.php'-like file
with access to only one table, that stores the encrypted
passwords to connect to MySQL, but then I would have the problem
of hiding the key to it.  Changing permissions won't work
either, if you chmod o-r or something similar, nobody will be
able to access the web application, obviously.  Is there an
accepted method to get around this problem, or should I just
solve it on my own? The problem is that I don't want it to be
too convoluted if there is an accepted method.  share|improve
this question What kind of access are you giving to your users
that they can see the PHP source in the 1st place? –  Rocket
Hazmat Jun 8 '11 at 16:19 Other dev