Re: Re:Magic-quotes

Jeff McKeon wrote: > So now the big question which will undoubtly spark a lot of opinions (I > hope). > > We use apache/php/mysql based sites for internal management of our > systems and would now like to give our customers direct access to manage > their accounts via the web. Naturally this raises security concerns. > > From the PHP perspective, is Apache/PHP(as Module)/MySQL a secure enough > platform to use for a public website that will access a production > database? > > Opinions? Thoughts? Let me re-phrase your question: We normally do inside Sales and B2B Sales. We're about to open a StoreFront. Is that secure enough? :-) One useful tidbit, however: If you have a bunch of tables/data in MySQL that do *NOT* need to be publicly accessible, consider setting up a replication setup where only *some* of the tables are on the public site. That, however, is an all-MySQL issue. http://mysql.com -- Like Music? http://l-i-e.com/artists.htm