Protecting database passwords

From: Date: Wed, 30 Jun 2004 00:58:03 +0000
Subject: Protecting database passwords
Groups: php.general 
Request: Send a blank email to php-general+get-189254@lists.php.net to get a copy of this message
Hi there, I wrote a php script that accesses a database, and I am wondering about securing the password to the database. I could prompt the user for the password every session, but I don't necessarily want the user to have the password. Unless I'm missing something, any on-disk place I store the password needs to be readable by PHP, and therefore isn't very secure. I have restricted the rights of the database user, but I'm wondering how others have dealt with this, or maybe I'm completely missing the point. -Bob

« previous php.general (#189254) next »