RE: [PHP-DB] encryption of critical data

HI If you are using MySql look at ENCODE() on mysql.com http://www.mysql.com/doc/M/i/Miscellaneous_functions.html Most databases support some sort of encryption. Encrypting by php is probably more secure - somebody might be able to sniff data going to the database if it still plain text, but that is a small risk IMHO, and getting the database to do it is easy . HTH Peter ----------------------------------------------- Excellence in internet and open source software ----------------------------------------------- Sunmaia www.sunmaia.net info@sunmaia.net tel. 0121-242-1473 ----------------------------------------------- > -----Original Message----- > From: youx [mailto:youx@free.fr] > Sent: 27 June 2002 14:12 > To: php-db@lists.php.net > Subject: [PHP-DB] encryption of critical data > > > Hi, > Can someone provide me some information about encryption and > decryption of critical data such as credit number card in order > to stock them on a mysql database in a secure way. > > What I want to do is making a web interface secured via SSL in > order to be able to consult some people information. As I don't > want the critical information to be plaintext on the db, I'm > searching for a way to get it encrypted and then decrypted when > I'm consulting via the interface. > > I've read the php.net documentation and many articles about data > encryption/decryption but both of them stand theorical about the > various algorithms. > > Do you know the more secures of them and the way to use them ? > Do you know people working in the same way or do they prefer > another kind of more secure solution ? > > Thank you for your advice, > R. >