Take the 2-minute tour ×  I set up two servers, one for MySQL,
the other one for PHP. PHP serves the user and runs on top of
nginx. The second server with MySQL can only be accessed from
the same IP of the PHP web server.  This way I want to put an
additional barrier between a possible intruder and him being
able to access critical customer data stored in the MySQL db.
However, if sb. was to break into my PHP server, he would get
access to all the PHP files and thus would also be able to get
through to the MySQL server because all the config files for PHP
are on the PHP server.  What would be a good approach to get
around this problem? I understand that this would be the worst
case scenario, but still, is there are way to store my config
files more securely?  share|improve this question Your chain is
as strong as your weakest link. –  Wesley van Opdorp Jun 9 '11
at 13:19 In this case that would be PHP. I was thinking of
something around the lines of PHP receiving the details
externally from another source (m