Bug #14564: Trusted Connections Not Supported

From: Date: Mon, 17 Dec 2001 16:12:08 +0000
Subject: Bug #14564: Trusted Connections Not Supported
Groups: php.dev 
Request: Send a blank email to php-dev+get-74158@lists.php.net to get a copy of this message
From: parkins.graham@ppc-consulting.co.uk Operating system: Windows NT 4/SQL Server 7 PHP version: 4.1.0 PHP Bug Type: MSSQL related Bug description: Trusted Connections Not Supported I consider the inclusion of database usernames and passwords in scripts to be a security risk. In a Windows environment it is possible to access SQL Server via a trusted connection. This uses the context of the current logged in user. Furthermore it is possible to configure IIS and presumably Apache to use a particular user account to service requests. It is therefore possible (for example under ASP) to open a database connection without specifying a username or password in the script because the context of the current user account has permission to access the SQL Server. I would be happy if this functionality could be implmented in the MS SQL Server extension. -- Edit bug report at: http://bugs.php.net/?id=14564&edit=1

« previous php.dev (#74158) next »