What are the potential security risks of storing passwords in a PHP configuration file?

Storing passwords in a PHP configuration file can pose a security risk because if the file is accessible to unauthorized users, they can easily view the passwords. To mitigate this risk, it is recommended to store passwords in a separate file outside of the web root directory and restrict access to it using appropriate file permissions. 

// Define password in a separate file outside of the web root directory
// For example, create a file called "passwords.php" with the following content:
<?php
define('DB_PASSWORD', 'your_password_here');
?>

// Include the password file in your PHP script
require_once('/path/to/passwords.php');

Keywords

security risks storing passwords PHP configuration file plaintext vulnerability

Related Questions