Re: password in md5 to connect to mysql instead of clear password
| From: | Martin Norland | Date: | Thu, 24 Feb 2005 15:07:15 +0000 |
| Subject: | Re: password in md5 to connect to mysql instead of clear password | ||
| References: | 1 | Groups: | php.db |
| Request: | Send a blank email to php-db+get-38662@lists.php.net to get a copy of this message | ||
Gael Lams wrote:
Hi all I use the classic following rows to connect to a mysql database. I always put $passsword in clear in the php connection file and I wonder whether there is a way to have it in md5 so that someone reading the file could not use it to connect to the db. I googled a bit but find only threads explaining how to have password saved in md5 inside a mysql table which is not I would like to do [snip]No. Think about it - if your script is able to connect using this MD5 hash of the password - anyone who could read that script could similarly just connect using the MD5. Store your password in an included file outside of the webroot. Cheers, -- - Martin Norland, Sys Admin / Database / Web Developer, International Outreach x3257 The opinion(s) contained within this email do not necessarily represent those of St. Jude Children's Research Hospital.