How to get variable from php file from browser string?

Question

PHP

If you go to vinescope.com/architecture/, there is a connect.php file that contains data for connecting to the database. In general, the contents of the file looks like this:

<?php

$DB_username = "scriptbu_dlol";
$DB_password = "newpassword1";
$DB_name = "scriptbu_dlol";
$DB_hostname = "localhost";

$DBobject = mysql_connect($DB_hostname, $DB_username, $DB_password) or Die("There was a problem connecting to your Database Server");
mysql_select_db($DB_name, $DBobject) or Die("No such Database exist on your server.");

if(!get_magic_quotes_gpc())
{
  $_GET = array_map('mysql_real_escape_string', $_GET); 
  $_POST = array_map('mysql_real_escape_string', $_POST); 
  $_COOKIE = array_map('mysql_real_escape_string', $_COOKIE);
}
else
{  
   $_GET = array_map('stripslashes', $_GET); 
   $_POST = array_map('stripslashes', $_POST); 
   $_COOKIE = array_map('stripslashes', $_COOKIE);
   $_GET = array_map('mysql_real_escape_string', $_GET); 
   $_POST = array_map('mysql_real_escape_string', $_POST); 
   $_COOKIE = array_map('mysql_real_escape_string', $_COOKIE);
}

include("settings.php");

?>

Since the script is free, I am interested in such a security issue, is it possible to get the variables DB_name, DB_password, etc. from the browser line by making a request?

Answer 1

Free means nothing. No. But you can work on protection against injections

Answer 2

Roll it into class and there will be no problems

Answer 3

In this case, you can't. To increase security, it is better to make sure that the 'scriptbu_dlol'@'localhost' account has limited rights.