Re: Securing PHP scripts

Поиск
Список
Период
Сортировка
От brew@theMode.com
Тема Re: Securing PHP scripts
Дата
Msg-id Pine.BSF.4.44.0308182252530.81707-100000@themode.com
обсуждение исходный текст
Ответ на Securing PHP scripts  ("Cody Phanekham" <Cody.Phanekham@salmat.com.au>)
Ответы Re: Securing PHP scripts
Список pgsql-php
Cody.....

> Now to connect to the DB via PHP, I have the password hard coded (which is in clear text).
>
> Here is my question: Is there a way around storing the password in clear text?

But no user can ever read that clear text, right?  They should only get
the PHP script output which normally wouldn't contain the user name and
password.....

There can be a danger of other users on the machine being able see the
clear text password if it's a shared machine and if they are able to read
the script, though!

Of course that didn't answer your question...... maybe somebody else knows
a way around storing it in clear text.

BTW, for the best security you should be sure and run PHP with
register_globals off in the php.ini config file, read about it at

http://us4.php.net/register_globals

Sorry if I'm telling you a bunch of stuff you already know anyway.......

brew






В списке pgsql-php по дате отправления:

Предыдущее
От: "Cody Phanekham"
Дата:
Сообщение: Securing PHP scripts
Следующее
От: "Luke Woollard"
Дата:
Сообщение: Re: Securing PHP scripts