hide connect rpc in code

[tradebtcdotus]

Hello everybody!
When I use php connect with bitcoind via rpc
I must write user/password rpc in code
problem: when hacker hack code, they will get my bitcoin.
how can I hide connect rpc in code?

[sellscript]

I think you can use database

[achow101]

Hello everybody!
When I use php connect with bitcoind via rpc
I must write user/password rpc in code
problem: when hacker hack code, they will get my bitcoin.
how can I hide connect rpc in code?

Make sure you setup the rpc so that both port 8332 is not available from the outside and that the rpc server only accepts connections from whatever ip the webserver is hosted on. (probably localhost)

[goregrind]

There is no easy solution here, just write secure scripts.
As long as your script has access to your bitcoins so will any attacker that gets access to your script.

[coinpr0n]

If someone hacks the server that's pretty much it. But you can avoid putting the password directly into the source code by using the server's environment variables or some other mechanism of separating it out and only read on loading / execution of the script.