Re: password in md5 to connect to mysql instead of clear password

From: Date: Thu, 24 Feb 2005 15:07:15 +0000
Subject: Re: password in md5 to connect to mysql instead of clear password
References: 1  Groups: php.db 
Request: Send a blank email to php-db+get-38662@lists.php.net to get a copy of this message
Gael Lams wrote:
Hi all I use the classic following rows to connect to a mysql database. I always put $passsword in clear in the php connection file and I wonder whether there is a way to have it in md5 so that someone reading the file could not use it to connect to the db. I googled a bit but find only threads explaining how to have password saved in md5 inside a mysql table which is not I would like to do [snip]
No. Think about it - if your script is able to connect using this MD5 hash of the password - anyone who could read that script could similarly just connect using the MD5. Store your password in an included file outside of the webroot. Cheers, -- - Martin Norland, Sys Admin / Database / Web Developer, International Outreach x3257 The opinion(s) contained within this email do not necessarily represent those of St. Jude Children's Research Hospital.

« previous php.db (#38662) next »