Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

In this Discussion

osTicket v1.10 (stable) and Maintenance Release v1.9.15 are now available! Go get it now

Moving database credentials and salt out of document root

Has anybody had any luck in moving the secure information from ost-config.php out of document root?  I have tried various methods, including moving the salt and definitions into their own file and including them in ost-config.  I created ost-config2.php like this:
<?php
define('DBTYPE','mysql');
define('DBHOST','mysqlserver');
define('DBNAME','os_support');
define('DBUSER','support_user');
define('DBPASS','mypassword');
?>
and then changed ost-config.php to include the new file, like this:
# Mysql Login info
include("ost-config2.php");
/*
define('DBTYPE','mysql');
define('DBHOST','mysqlserver');
define('DBNAME','os_support');
define('DBUSER','support_user');
define('DBPASS','mypassword');
*/
It works locally, BUT not if ost-config2.php is in a path directory or if I reference it elsewhere (like ../../../ost-config.php)

Tagged:

Comments

  • FYI: everything in /include is forbidden from web access.
Sign In or Register to comment.