Bug #14564: Trusted Connections Not Supported
| From: | parkins dot graham at ppc-consulting dot co dot uk | Date: | Mon, 17 Dec 2001 16:12:08 +0000 |
| Subject: | Bug #14564: Trusted Connections Not Supported | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-74158@lists.php.net to get a copy of this message | ||
From: parkins.graham@ppc-consulting.co.uk
Operating system: Windows NT 4/SQL Server 7
PHP version: 4.1.0
PHP Bug Type: MSSQL related
Bug description: Trusted Connections Not Supported
I consider the inclusion of database usernames and passwords in scripts to
be a security risk.
In a Windows environment it is possible to access SQL Server via a trusted
connection. This uses the context of the current logged in user.
Furthermore it is possible to configure IIS and presumably Apache to use a
particular user account to service requests.
It is therefore possible (for example under ASP) to open a database
connection without specifying a username or password in the script because
the context of the current user account has permission to access the SQL
Server.
I would be happy if this functionality could be implmented in the MS SQL
Server extension.
--
Edit bug report at: http://bugs.php.net/?id=14564&edit=1