How to get Mysql password for connection using getenv()

Question

I currently use the standard connection form to get the data from MySql, but I know that for greater safety is used the getenv(), however I do not know how to make it to recover the password of connection with my database.

Below is how my connection with Mysql is made

<?php
$con = mysqli_connect("localhost", "root", "", "guaraparivirtual");
?>

Answer 1

There’s no point in using putenv, If you’re gonna do this, you might as well throw it all in one array or object, something like:

config.php

the return is recognized in the include

<?php

return (object) array(
    'host' => 'localhost',
    'user' => 'root',
    'pass' => 'meupassword',
    'db'   => 'meubanco',
);

php page.

$config = require 'config.php';

$con = new mysqli($config->host, $config->user, $config->pass, config->banco);

The issue of security

Maybe that story you heard getenv be safer is to set up refer to setting up such data outside the .php, in the environment variables to be more exact, I will not get into merit of discussion on this, because it does not make much sense, the variables will be accessible to any application anyway, both ways, using a array/object or using the environment variables (Environment Variables) you can be as safe as you are insecure, if your server has some "evil application" it can steal your passwords wherever they are, it won’t matter, if your server is insecure then the problem not in your phps and yes on your server.

Now if your fear is someone getting access to .php, use putenv won’t solve anything.

In short, if your fear is some user via internet access password somehow use getenv is not solution, it is impossible for the visitor to have access to this data unless you have exposed them with echo, print, print_r or some very badly done debugger (it is highly recommended to turn off debuggers in the production server).

Answer 2

Hey, you gotta do something like this.

putenv("host=localhost");
putenv("user=root");
putenv("pass= ");

$db_host=getenv("host");
$db_user=getenv("user");
$db_pass=getenv("pass");
$db_name="tese";

$con = new mysqli($db_host, $db_user, $db_pass);

I hope I’ve helped