RE: Re: Is this possible?

["Bastien Koert" <bastien_k@xxxxxxxxxxx>]

Depends on what you mean by security safe. Safe for sensitive data? Nope. 
Its all sent clear text over the net unless you use ssl encryption. You will 
need to alter the second remote db to accept a connection/account coming 
from your primary server. Your host may not allow that, you'll need to check 
with them.

If the user account/passwords are not securely stored on the 
server...outside the root in  protected directory, you may risk a hacker 
gaining access to both accounts (local and remote).

Can it be done safely? Sure. But you may need greater control over the 
servers than what the host(s) are willing to allow. There may be additional 
costs (SSL certificates, set-up charges etc)

Bastien

> From: JeRRy <jusa_98@xxxxxxxxx>
> To: php-db@xxxxxxxxxxxxx
> Subject:  Re: Is this possible?
> Date: Mon, 24 Jan 2005 05:20:20 +1100 (EST)
>
> Let me explain this a bit better, or try to. ;)
>
> Let's say I have some code on MY SERVER.
>
> I will call it "MYSERVER" and an outside server
> outside my local area "OUTSIDESERVER".
>
> Now I have PHP on "MYSERVER" to connect to a database
> on an "OUTSIDESERVER" and once establish do a few
> updates/deletes etc.
>
> Now the database names, passwords etc will be stored
> on "MYSERVER" which uses input themself to save.
>
> Now is this method security safe and possible or are
> most servers setup to a DB connection can only be made
> by "localhost"?
>
> J
>
>
>
> Date: Sun, 23 Jan 2005 15:51:02 +1100 (EST)
> From: "JeRRy" <jusa_98@xxxxxxxxx>
> To: php-db@xxxxxxxxxxxxx
> Subject: Is this possible?
>
> Hi,
>
> Is it "security safe and possible" to use my server to
> query another server, outside the local zone, and make
> updates to another server using a PHP page from my
> server?
>
> I'm just wondering.
>
> So in other words I'd have a DB setup to hold users
> domains, db names, db usernames, db passwords etc on
> mine and run PHP code query their own on their server.
>  I wanna do this to run a program I am working on and
> wanna keep the code on my server rather than handing
> it out to people to freely use.
>
> Again the question is, is it security safe and
> possible. :)
>
> J
>
>
> Find local movie times and trailers on Yahoo! Movies.
> http://au.movies.yahoo.com
>
> --
> PHP Database Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php

--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php