dbConnect.php
Posted: Fri Dec 12, 2014 7:37 am
In one php file, dbConnect.php, the creator of the program starts off with using mysql_connect() to connect to MySQL with a user ID and password before the User's Login ID is even tried. Is this necessary? Is this how it has to be? I mean, he puts a Login_ID and Password directly into the php code of this program. The Password happens to also be the Administrator's password to MySQL. This somehow doesn't seem right to me. This was done back in 2009 by the then developer.
Code: Select all
$ms = mysql_pconnect($host, $user, $pass);