RE: [PHP] Protecting database passwords
| From: | Chris W. Parker | Date: | Wed, 30 Jun 2004 21:17:28 +0000 |
| Subject: | RE: [PHP] Protecting database passwords | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-189376@lists.php.net to get a copy of this message | ||
zeus@ix.netcom.com <mailto:zeus@ix.netcom.com>
on Wednesday, June 30, 2004 2:11 PM said:
>> Hashing ... but i guess he wants to protected the password
>> needed to access the DB not a PW stored in the DB.
>
> Yes, this is what I am concerned about, access to the file by local
> users on the server. Hashes won't help me.
argh. just make the file readable by root and the user that runs
apache/php and you're done. what else is it that you want to know?
chris.
p.s. btw hashes will help you (keep the contents of the file secure
which is your ultimate goal is it not?).