我应该使用PHP包含数据库连接

Question

I've been told that it is unsecure to make database connections inside a PHP includes. For example If I have a login page and add an "include('process.php')" at the top of the page that has a database connection, is that unsecure?

Answer 1

For example If I have a login page and add an "include('process.php')" at the top of the page that has a database connection, is that unsecure?

No.

Maybe the person who told you this was talking about something else - like including a file using a dynamic value coming from a GET parameter, or using remote http:// includes, or as @AlienWebguy mentions, having the password include inside the web root. But using includes in itself is not insecure.