Preserved Topic: variable scope

1) Is there a way I can define $db so I can use it in any of my functions? Otherwise I have to write same line in both functions.

$db = mysql_connect("localhost", "root");

2) Is there any security issues with using root?

evilclown01

Basically
global $db;

will work inside the function.

Check this page out http://www.php.net/manual/en/language.variables.scope.php

Yes others may have full access to your db.



:[ Computers let you make more mistakes faster than any other invention in human history, with the possible exceptions of handguns and tequila. ]:

quote:

---

Yes others may have full access to your db.

---

You mean other functions, not people?(just wondering because I thought I saw a security thread that said do not use global variables)

evilclown01

You shouldn't use "root" user to connect to MySQL database. You should also define a password for that user, since you're connect to your database as root user (which has admin privileges) and you don't have a password defined. You should define password for root, and also other user account which can only access database that you're using...

How do I define a password for root? (this is on windows)

How do I create another user? Then how do I give it access to the database?

So there is not a way for someone to see my source and find out my username and password?

So are global variables ok to use if you give them a value in your script so someone can't do: http://www.somewhere.com/index.php?var=value

evilclown01

[This message has been edited by evilclown01 (edited 02-03-2002).]

I suggest that you take a look at MySQL documentation where you'll find answers to all your question that you may have about MySQL: http://www.mysql.com/documentation/index.html

If you define values of global variables in your script, they should be safe. BTW I suggest you to also take a look at constants: http://www.php.net/manual/en/language.constants.php




[This message has been edited by mr.maX (edited 02-04-2002).]

quote:

---

How do I define a password for root? (this is on windows)

How do I create another user? Then how do I give it access to the database?

---

use a visual tool such as MySqlFront, this have a dialog for adding and removing users w/ priviliges visually (under Tools/Users menu)

There shouldn't be an issue with global vars They are only related to scope

The issue with the root db access it that MySQL is a server. You can access it as if it were a web page from remote hosts without the appropriate security in place.



:[ Computers let you make more mistakes faster than any other invention in human history, with the possible exceptions of handguns and tequila. ]:

By the way, you only need that $db variable if you are maintaining connections to multiple databases. mysql_query uses the default connection if only one connection is open.

-jiblet