Topic awaiting preservation: Includes outside of web root (Page 1 of 1)

is it OK to just include a page outside of the web root by doing:

require ("/var/www/inc/my_sensitive_info.php")

I know I can do it this way, but is there maybe a better and more secure way to include info such as database connectivity info and the such.

Thanks in advance!

Later,

C:\

why do you think this way is insecure?

just wondering is all.

Later,

C:\

As long as you're using a hardcoded string this is as good as it gets. Once you start using variables is when things can get dicey.

Also a good practice is making sure your php.ini basedir setting is to /var/www/ helps.



.:[ Never resist a perfect moment ]:.

ok, so doing it that way is cool but say: require("$myInfo"); is not.

That's what I was wondering. Just where it starts to be not so good. I have just been wondering where it starts to be a little less secure.

Thanks!

Later,

C:\