Re: Secure Password (MySQL) Storage

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Raditha Dissanayake wrote:
Olaf van der Spek wrote:

Hi,

Is there a way to store MySQL (or other sensitive data) that will be

It should read MySQL passwords.

passed to a library in such a way that scripts itself can't access this?
A per-vhost store would be ideal.

If not, would this be a good idea to implement?

Your question is not very clear but if you want to protect your data from prying eyes surely the best way would be to encrypt it? as for security on shared hosting enviorenments we have discussed that topic in the past a few times and the voices of authority strongly believe that it's not possible to completely prevent other users from taking a peek at your code. But then again you could use the turck or zend encoder on it.

I'm more worried about the data (in MySQL), not the code.
By protecting the MySQL password from being read by scripts directly and only allowing access based on the current vhost, only this vhost can access it's own database and not somebody else.


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux