I want to log my user in on my site... the username and password are in a table of my site's database

Now I'll have to login with root (for instance ) because it has enough permission to carry out the operation. ie
mysqli_connect ('host', 'username', 'password')
to check this table and retrieve data …but that would appear in my source code. Help me out please. Thanks

you still need to choose the database you wish to connect to

try mysqli_select_db(“database_name“);

Your question is not clear.

losprince:
you still need to choose the database you wish to connect to

try mysqli_select_db(“database_name“);

you can also add the database name to it, that's what i use every time.
mysqli_connect ('host', 'username', 'password','database_name');

You can use the oop style,
e.g. $db = new mysqli('host', 'user', 'pass', 'db');
$result = db->query('select * from rubbish";
$rows = $result->num_rows;
$data = $result->fetch_assoc();

You can try it out, and also search more about the oop mysqli

losprince:
you still need to choose the database you wish to connect to

try mysqli_select_db(“database_name“);

No... my point is not how to connect

tr3y:
Your question is not clear.

What iam trying to say is... can't someone get my connection password by viewing sourcecode?

logicalhumour:
What iam trying to say is... can't someone get my connection password by viewing sourcecode?

Nope under normal condition, it's not possible. Your code is evaluated at the backend.
Maybe if they find a way to stop PHP engine from parsing your source code.

logicalhumour:
I want to log my user in on my site... the username and password are in a table of my site's database

Now I'll have to login with root (for instance ) because it has enough permission to carry out the operation. ie
mysqli_connect ('host', 'username', 'password')
to check this table and retrieve data …but that would appear in my source code. Help me out please. Thanks

1. Store your connection parameters as environment variables and read them in with the getenv function.
2. Store your connection parameters in a php file outside your server's webroot (not in www or any sub folder inside www), i.e. the file containing the parameters should not be accessible to anyone visiting your site in the browser. Require this file in the source file where you need to use the parameters.

but if I do this, am I not ...like allowing port 80 to access my computer?. If its hosted, wouldn't port 80 have to communicate with something outside the server which is my physical computer?

foldl:


1. Store your connection parameters as environment variables and read them in with the getenv function.
2. Store your connection parameters in a php file outside your server's webroot (not in www or any sub folder inside www), i.e. the file containing the parameters should not be accessible to anyone visiting your site in the browser. Require this file in the source file where you need to use the parameters.

but if I do this, am I not ...like allowing port 80 to access my computer?. If its hosted, wouldn't port 80 have to communicate with something outside the server which is my physical computer?

Thanks everyone. I'm no longer bordered. @tr3y - this link php.about.com/od/troubleshooting/qt/view_source.htm.added to What u said

logicalhumour:
but if I do this, am I not ...like allowing port 80 to access my computer?. If its hosted, wouldn't port 80 have to communicate with something outside the server which is my physical computer?

Depending on your server configuration (Apache, NginX, lighttpd, iis) only files in your webroot or the document root specified in you virtual host configuration are served on port 80 (or any port that your web server has been configured to use). If your site's config file is located outside those locations it can still be accessed (ie required or included) by your php scripts.