[FX.php List] Lesson learned about password values

Jonathan Schwartz jschwartz at exit445.com
Fri Jan 11 11:15:58 MST 2008


OOoh.  That's a great trick. Thank you.  I'll need to dig into it. 
Phpini is my friend...Phpini is my friend...

Regardng the search and replace, BBEdit's Find/Replace function did a 
fine job.  I just want to avoid having to do this again.  It's a 
little unnerving to make global changes that could very well break 
everything in one well swoop. ;-)

J


At 5:59 PM +0000 1/11/08, Steve Winter wrote:
>Hi Jonathan,
>
>In your PHP.ini file you can specify a default include location to 
>'include' files from (do a phpinfo(); to track down your ini file, 
>and see what its' currently set to, if anything). You can then place 
>files in that folder... in your pages if you do 
>include('maillParameters.php;); php will firstly look in the same 
>folder as the file that the include is in, if it doesn't find it 
>there, it will look in the folder specified in php.ini (and if it 
>doesn't find it there it will throw an error).
>
>The upshot of this is that you can have include files which are 
>accessible from every page/virtual server/folder on your server...
>
>HTH..
>
>Cheers
>Steve
>
>
>
>
>-----Original Message-----
>From: Jonathan Schwartz <jschwartz at exit445.com>
>To: "FX.php Discussion List" <fx.php_list at mail.iviking.org>
>Date: Fri, 11 Jan 2008 09:11:36 -0800
>Subject: [FX.php List] Lesson learned about password values
>
>Hi Folks,
>
>I'm trying to track down the source of unauthorized emails going
>through my mail server.  The problem is, when I first started using
>PHPMailer, I used a hard-coded Username and Password.  Guess what?  I
>now need to locate and edit every script in every project that
>contains that password pair.
>
>If I had used a variable and stored it into a centrally-located
>include file, the change would have been made just once...or at least
>once per project.
>
>Is server_data the right place?  If so, then that would require a
>change in every solution/project. Otherwise, where would one store a
>single server_data file that feeds all solutions?  I've heard
>discussion about not storing the server data on the same machine,
>also.
>
>Thx
>
>Jonathan
>
>
>--
>Jonathan Schwartz
>Exit 445 Group
>jonathan at exit445.com
><http://www.exit445.com>http://www.exit445.com
>415-381-1852
>_______________________________________________
>FX.php_List mailing list
>FX.php_List at mail.iviking.org
><http://www.iviking.org/mailman/listinfo/fx.php_list> 
>http://www.iviking.org/mailman/listinfo/fx.php_list
>
>
>_______________________________________________
>FX.php_List mailing list
>FX.php_List at mail.iviking.org
>http://www.iviking.org/mailman/listinfo/fx.php_list


-- 
Jonathan Schwartz
Exit 445 Group
jonathan at exit445.com
http://www.exit445.com
415-381-1852
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.iviking.org/pipermail/fx.php_list/attachments/20080111/6744ab51/attachment.html


More information about the FX.php_List mailing list