RE: [PHP] Password encyption
| From: | Matthew Sims | Date: | Fri, 02 Jul 2004 20:45:40 +0000 |
| Subject: | RE: [PHP] Password encyption | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-189582@lists.php.net to get a copy of this message | ||
> So host your own server. That way nobody but you has access to it.
> Then you could store the password wherever you want, unecrypted, and it
> wouldn't matter. If you're running an application that's that security
> conscious, you shouldn't be using a shared server anyway.
>
> -----Original Message-----
> From: Anzak Wolf [mailto:anzak@hotmail.com]
> Sent: Friday, July 02, 2004 1:24 PM
> To: jay.blanchard@niicommunications.com; holmes072000@charter.net
> Cc: php-general@lists.php.net
> Subject: RE: [PHP] Password encyption
>
>
> Yes I have looked though since I'm not 100% sure what I'm looking for
> it is
> hard to come up with a solid answer. I'm just looking for a more secure
> way
> to connect to my database through PHP and was hoping to find some
> suggestions here, not get the run around.
>
Bob does make a good point. If you don't run your own server, you might
want to see other options about running your site.
If you do run your own server, maybe store the passwd as an MD5 hash on
the web page that sends it to a script outside your web root. If the MD5
hashes match, return the passwd back to the web page.
--Matthew Sims
--<http://killermookie.org>