Req #31564 [Opn->Wfx]: Secure Password Storage
| From: | nikic@php.net | Date: | Thu, 12 Sep 2013 13:50:36 +0000 |
| Subject: | Req #31564 [Opn->Wfx]: Secure Password Storage | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-181546@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=31564&edit=1
ID: 31564
Updated by: nikic@php.net
Reported by: OvdSpek at LIACS dot NL
Summary: Secure Password Storage
-Status: Open
+Status: Wont fix
Type: Feature/Change Request
-Package: Feature/Change Request
+Package: *General Issues
Operating System: *
PHP Version: 5.0.3
Block user comment: N
Private report: N
New Comment:
Won't happen, because password management is too diverse to have some one-size fits all
solution. There is no problem per-se that scripts can read passwords.
Previous Comments:
------------------------------------------------------------------------
[2005-01-15 16:52:32] OvdSpek at LIACS dot NL
Description:
------------
Hi,
Would it be possible to add secure password storage (mainly for database access) to PHP (when used
as web server module) such that:
The passwords are per vhost.
The passwords can't be read by scripts themself in any way.
The passwords can only be read by the library (function) that actually uses them.
Multiple passwords can be stored. For example, a vhost could use five user/pass combinations to
access five databases.
The advantage would be that passwords wouldn't be stored in normal PHP files (readable by
scripts) anymore and that script configuration would be easier.
Reproduce code:
---------------
-
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=31564&edit=1