Re: How to access Postgres .pgpass file from php?

On 9/7/19 3:17 PM, Howard Wells wrote:
> I have my php files in the web root, and the Postgres 10 logon 
> credentials are in the php file.  I want to put them outside the web 
> root for security, because a malicious robot could easily read the 
> credentials.
> 
> After research, I found the .pgpass file.  That looks like the ideal 
> solution, but after even more research, I haven't found how to use that 
> file from a php logon script.
> 
> Here is the section from my php script:
> 
> $dsn = vsprintf('pgsql:host=%s;port=%s;dbname=%s;user=%s;password=%s', [
>      'host' => '000.00.00.00',
>      'port' => '5432',
>      'dbname' => '[dbname]',
>      'user' => '[username]',
>      'password' => '[password]',
> ]);
> 
> Currently I store the real dbname, user and password in the php.  My 
> questions are:
> 
> 1. How can I access it from the .pgpass file instead?

I think what you are looking for is the connection service file:

https://www.postgresql.org/docs/11/libpq-pgservice.html


> 
> 2. Where is .phpass loccated in Apache2 Ubuntu 18.04?

Information on where .pgpass can be:

https://www.postgresql.org/docs/11/libpq-pgpass.html

> 
> Thanks for any help with this.
> 
> Howard
> 
> 
> 


-- 
Adrian Klaver
adrian.klaver@aklaver.com