I think tumblr has a huge security hole

Re:I think tumblr has a huge security hole by FirstHopSystems on Saturday March 19, 2011 @08:04AM (#2343389)

I always use a include for any hashes or passwords in a separate file. When I started learning PHP I exposed my MySQL database password more times then I could keep track of.

It does hammer home the point of staging before deploying. Also the point of making sure you vary your passwords between sites.

[ Parent | on HN ]

Re:I think tumblr has a huge security hole by jasonlotito on Saturday March 19, 2011 @10:51AM (#2343710)

Do not store configuration in code. Store it in files that aren't part of the software. Store this file outside the web root.

[ Parent | on HN ]