Securing a Database conn. page?

[Thundergaming]

After some trial and error i found out that my DBX.php is wide open for any one to find my password. what is the CHMOD that is needed. it was at 777 (not one of my smarter ideas )

[Ron]

After some trial and error i found out that my DBX.php is wide open for any one to find my password. what is the CHMOD that is needed. it was at 777 (not one of my smarter ideas )

Are you worried about someone logged onto the server, or over the web? I would think that Apache wouldn't serve up a plain text .php file.

There are many very well known bulletin boards and other public domain programs that have widely known locations for the config file, and to my knowledge it hasn't been a major problem.

[JPC-Greg]

try 644 , or 744, or 745 .. 644 should be fine for it though

[tank]

you can also modify your .htaccess file to make it unviewable

[Gwaihir]

and move it away from under the web root