Safest place to put database connection file

charu · 12-08-2010, 08:03 AM

When connecting to a database in a php script, where would be the safest place to store the connect.php file. I am thinking it should not be in public_html, but is it safe in sub folders or is there a method people generally use to keep such files secure and inaccessible.

The file I mean is one including the database name, user and password etc.

AlucardZero · 12-08-2010, 08:04 AM

Completely outside of your webroot, so above public_html. Though I'm not sure if the other files will then be able to access it. Try it!

charu · 12-08-2010, 12:56 PM

Thanks, I have put it in the directory "above" public_html. It is working ok from there and I assume that it is completely inaccessible to anyone except account ftp user from there.