From 0bfc9f2e4b722af3d103854379e7525d3fff9bbe Mon Sep 17 00:00:00 2001
From: h5p9sl <21267024+h5p9sl@users.noreply.github.com>
Date: Thu, 15 Apr 2021 09:46:15 -0600
Subject: Add database cred .ini config

Database credentials should not be hardcoded into server,
.ini config files are a good alternative.
---
 includes/db_inc.php | 18 ++++++++++++++----
 1 file changed, 14 insertions(+), 4 deletions(-)

diff --git a/includes/db_inc.php b/includes/db_inc.php
index 2c29ed1..10740d8 100644
--- a/includes/db_inc.php
+++ b/includes/db_inc.php
@@ -1,9 +1,19 @@
 <?php
+/*
+# Example config values
+[mysql_credentials]
+server = "localhost"
+database = "forum"
+user = "root"
+password = "admin"
+*/
+$cfg_ini = parse_ini_file('/var/www/cflip.ini', true);
+$dbcfg = $cfg_ini['mysql_credentials'];
 
-$db_server = 'localhost';
-$db_user = 'root';
-$db_pass = 'admin';
-$db_database = 'forum';
+$db_server = $dbcfg['server'];
+$db_user = $dbcfg['user'];
+$db_pass = $dbcfg['password'];
+$db_database = $dbcfg['database'];
 
 $dbc = mysqli_connect($db_server, $db_user, $db_pass, $db_database);
 
-- 
cgit v1.2.3