-1
To make a connection to the Mysql database use this code in PHP:
$host = "host";
$usuario = "usuario";
$banco = "banco";
$senha = "senha";
$pdo = new PDO('mysql:host='.$host.';dbname='.$banco, $usuario, $senha);
$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
Is there any way to encrypt the password and login? Because the client found this file unsafe with the access data so loose in FTP....
0
The most common is to use environment variables to store database connection credentials.
The file pattern is widely used .env (dotenv or "dot env") to write environment variables. And to read these variables into the code you can use a library like the josegonzalez/php-dotenv.
For this to be safe it is important that the file .env stay out of the internet accessible folder (generally public_html or www).
Another alternative is to configure environment variables directly on the server, but requires some knowledge in server administration. And then read the values using the function getenv.
Browser other questions tagged php pdo cryptography connection passwords
You are not signed in. Login or sign up in order to post.
Okay, you want to encrypt the login/password... To encrypt you need a key, where would this key go? You can use environment variable, this removes passwords from code, preventing passwords to be saved in multi-places and also to be saved using
git(and the like). Another but radical alternative is to create a user using theREQUIRE X509user. That way, you do not use "login/password", but use certificates (which in any way will have to be setting in some corner).– Inkeliz