Re: Storing sensitive information in MySQL

Ahhh.... my favorite subject. Privacy. There are two PHP functions that do _exactly_ what you're looking for. Mcrypt_encrypt and mcrypt_decrypt. If you're looking for just enough encryption to keep the curious out, use a single password for all encryption. If you want military-grade encryption, have each person choose a (strong) password. I'd suggest Rinjdael or twofish as the encrypting algorithm. On Thu, 1 Mar 2001, Dreamvale wrote: > Hi, > > I have a situation where some sensitive information need to be stored in a > database, eg salary, medical info, etc. > > the data are only meant for the particular employees. > > however, the root user will have all the power to retrieve both the key > (stored somewhere either in a file, or php scripts, or db), and the database > too, hence can (not necessary will) read the sensitivie information. > > is there any techniques, or products to be used to solve this problem? > > thanks. > > > -- > PHP Database Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-db-unsubscribe@lists.php.net > For additional commands, e-mail: php-db-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net >