RE: [PHP] Passwords?
| From: | Chris W. Parker | Date: | Tue, 08 Mar 2005 17:13:50 +0000 |
| Subject: | RE: [PHP] Passwords? | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-210237@lists.php.net to get a copy of this message | ||
Jochem Maas <mailto:jochem@iamjochem.com>
on Sunday, March 06, 2005 5:24 AM said:
> that said you still don't want this file or this string to get into
> the hands of evilhaxors - best to keep this file (one with the
> encrypted pwd in it) outside of the docroot.
Why encode it at all then?
If someone is smart/crafty enough to actually hack the server and gain
access to the file which contains the password you're trying to protect
is the least of your problems.
Chris.