Re: SSL, PHP, & MySQL

I would say it really all depends on your network configuration. I am assuming that your Web server running PHP is running on one machine (SERVER A)and the MYSQL server running on another (SERVER B)outside of a common firewall? Is this accurate? If this is true, then I would presume that PHP on SERVER A could encrypt a datafile with MYSQL instructions and send it securely to SERVER B, but then who would un-encrypt it and feed it to MYSQL? You might want to look into other alternative like tunneling with SSH or 'stunnel'. I remember hearing some about it, but have not real experience with it. do a search on some MYSQL mailing lists for some insight. Or ask on the PHP-DB mailing list and you may be able to target a better qualified audience. -Brad Joshua Minnie wrote: > What about utilizing an encrypted text file then. Would there be anything > wrong with doing it that way? I really don't have too much of an option as > far as the server specs go because I didn't set up the web hosting. > > -Josh > > Brad Bonkoski wrote: > > I think you may need to read: > > http://www.php.net/manual/en/function.mysql-connect.php > > > > It appears that the SSL client flag for connecting to MYSQL is not > available > > until 4.3.0, but you can pick up the 4.3.0RC3 version now, and test it > out! I > > _think_ this is what you are looking for. > > HTH > > -Brad > > > > Joshua Minnie wrote: > > > > > Hi all, > > > I was wondering if anyone could direct me to some good tutorials on > how > > > to utilize PHP to access a MySQL database behind SSL. I have been > searching > > > PHPBuilder.com, PHPClasses.org, and hotscripts.com, and I can't seem to > find > > > any good tutorials for a beginner when it comes to SSL. I do have a > fairly > > > good working knowledge of PHP and MySQL so I'm not necessarily looking > for a > > > guide on that, I just need to know how to pass encrypted data back and > > > forth. Here is the scenario: > > > > > > My client has a website in which a customer will be purchasing gift > > > certificates online. They don't need a comprehensive e-commerce > package, > > > just simple information passed across a secure connection, such as: user > > > names, passwords, credit cards and mailing addresses. We already have a > > > MySQL db set up with the gift certificate "package" information. I just > > > need to be able to store the customer information for retrieval later by > the > > > owners of the site. > > > > > > Joshua Minnie > > > josh@wildwebtech.com > > > Independent Web Consultant / Developer > > > Wild Web Technology > > > www.wildwebtech.com > > > > > > ------------------------------------------------------ > > > Server Information: > > > + PHP v. 4.2.3 > > > + Apache 1.3.26 > > > + MySQL 3.23.53 > > > ------------------------------------------------------ > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php