Protecting database passwords
| From: | Bob Hockney | Date: | Wed, 30 Jun 2004 00:58:03 +0000 |
| Subject: | Protecting database passwords | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-189254@lists.php.net to get a copy of this message | ||
Hi there,
I wrote a php script that accesses a database, and I am wondering about securing
the password to the database. I could prompt the user for the password every
session, but I don't necessarily want the user to have the password. Unless I'm
missing something, any on-disk place I store the password needs to be readable by
PHP, and therefore isn't very secure. I have restricted the rights of the database
user, but I'm wondering how others have dealt with this, or maybe I'm completely
missing the point.
-Bob