how to not send plaintext when using mysql_connect -- REPOST
| From: | Daevid Vincent | Date: | Mon, 23 Oct 2000 18:32:52 +0000 |
| Subject: | how to not send plaintext when using mysql_connect -- REPOST | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-21823@lists.php.net to get a copy of this message | ||
Never got a reply on this one, so I'm hoping the second time someone will
know the answer. :)
-----Original Message-----
From: Daevid Vincent [mailto:DayWalker@thematrix.com]
Sent: Friday, October 20, 2000 4:07 PM
To: PHP General
Subject: [PHP] how to not send plaintext when using mysql_connect
http://www.php.net/manual/function.mysql-connect.php
indicates that I have to use the plaintext version of my password... this is
unacceptable for having the website server connecting to the mySQL server as
it can be sniffed easily.
Is there a way to encrypt this information somehow?
there is a comment at the bottom of the page, but I'm not sure I understand
it. It implies that MD5 is done transparently somehow, but I'm told by my IS
department that they are able to sniff the user/password that I'm sending in
my PHP scripts...
bdonor@westnet.com
10-Sep-2000 04:22
I'm sure most people have figured this out (possibly I missed it in the
documentation) but both mysql_connect and mysql_pconnect expect the
plaintext password, NOT the MD5 hash of the password. It does that all by
itself.
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
For additional commands, e-mail: php-general-help@lists.php.net
To contact the list administrators, e-mail: php-list-admin@lists.php.net