Re: How to protect MySQL password
| From: | Justin French | Date: | Wed, 24 Oct 2001 07:30:02 +0000 |
| Subject: | Re: How to protect MySQL password | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-72066@lists.php.net to get a copy of this message | ||
All these solutions are depending (mainly) on having a dedicated server,
which I believe would not be the case for 90% of the users on here
(don't shoot me if i'm wrong).
So far, I can't see how the problem can be solved. My host does not
allow telnet/ssh at all which sounds like a good thing!
I can put the password file outside the public html, but from i've read
in this thread, it looks like other users on a virtual server might be
able to gain access to that file using PHP or annother program to read
through the hard disk hierarchy.
Then there was a suggestion that everything could be wrapped in a
PHP-CGI thing, but I don't have PHP as a CGI on my server. What we
really need is an expert here to give us the low-down on the best way to
accomplish the best security given regular tools.
What about encryption?
Justin French