Re: SSL, PHP, & MySQL

I will try on the PHP-DB newsgroup as well, but I wanted to let you know about a link I found which shows the integration of SSL with MySQL and PHP. Here is the link: http://www.devshed.com/Server_Side/PHP/SoothinglySeamless/page1.html. Thanks for the help. -Josh "Brad Bonkoski" <bbonkosk@tampabay.rr.com> wrote: > I would say it really all depends on your network configuration. I am assuming > that your Web server running PHP is running on one machine (SERVER A)and the > MYSQL server running on another (SERVER B)outside of a common firewall? Is this > accurate? > > If this is true, then I would presume that PHP on SERVER A could encrypt a > datafile with MYSQL instructions and send it securely to SERVER B, but then who > would un-encrypt it and feed it to MYSQL? > > You might want to look into other alternative like tunneling with SSH or > 'stunnel'. I remember hearing some about it, but have not real experience with > it. do a search on some MYSQL mailing lists for some insight. Or ask on the > PHP-DB mailing list and you may be able to target a better qualified audience. > > -Brad > > Joshua Minnie wrote: > > > What about utilizing an encrypted text file then. Would there be anything > > wrong with doing it that way? I really don't have too much of an option as > > far as the server specs go because I didn't set up the web hosting. > > > > -Josh > > > > Brad Bonkoski wrote: > > > I think you may need to read: > > > > > > http://www.php.net/manual/en/function.mysql-connect.php > > > > > > It appears that the SSL client flag for connecting to MYSQL is not > > available > > > until 4.3.0, but you can pick up the 4.3.0RC3 version now, and test it > > out! I > > > _think_ this is what you are looking for. > > > HTH > > > -Brad > > > > > > Joshua Minnie wrote: > > > > > > > Hi all, > > > > I was wondering if anyone could direct me to some good tutorials on > > how > > > > to utilize PHP to access a MySQL database behind SSL. I have been > > searching > > > > PHPBuilder.com, PHPClasses.org, and hotscripts.com, and I can't seem to > > find > > > > any good tutorials for a beginner when it comes to SSL. I do have a > > fairly > > > > good working knowledge of PHP and MySQL so I'm not necessarily looking > > for a > > > > guide on that, I just need to know how to pass encrypted data back and > > > > forth. Here is the scenario: > > > > > > > > My client has a website in which a customer will be purchasing gift > > > > certificates online. They don't need a comprehensive e-commerce > > package, > > > > just simple information passed across a secure connection, such as: user > > > > names, passwords, credit cards and mailing addresses. We already have a > > > > MySQL db set up with the gift certificate "package" information. I just > > > > need to be able to store the customer information for retrieval later by > > the > > > > owners of the site.