RE: [PHP] how to not send plaintext when using mysql_connect -- R EPOST
| From: | Jason Murray | Date: | Fri, 27 Oct 2000 01:18:53 +0000 |
| Subject: | RE: [PHP] how to not send plaintext when using mysql_connect -- R EPOST | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-22239@lists.php.net to get a copy of this message | ||
> the "myuser" and "mypass" are sent in plaintext across the
> internet to the mySQL server "mysql.mydomain.com".
>
> THAT is what is the problem. Those packets can be sniffed by
> anyone on the internet that they happen to go through. hence
> that user can get myuser and mypass and write their own PHP
> page to muck around in my database.
Well, if your MySQL server is sitting securely in DMZ then this
isn't a problem, is it :) (If not, find a new provider...)
Jason