RE: [PHP] security
| From: | Maxim Maletsky \(PHPBeginner.com\) | Date: | Wed, 24 Apr 2002 10:21:50 +0000 |
| Subject: | RE: [PHP] security | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-94346@lists.php.net to get a copy of this message | ||
Was the question "is it neccessary" or "how to do it secure"?
I myself don't tlike the idea,
But if needed, then this could be a way.
Sincerely,
Maxim Maletsky
Founder, Chief Developer
www.PHPBeginner.com // where PHP Begins
-----Original Message-----
From: heinisch@creaction.de [mailto:heinisch@creaction.de]
Sent: Monday, April 22, 2002 3:51 PM
To: Maxim@gremlins.com.hk; Maletsky@PHPBeginner.com;
php-general@lists.php.net
Subject: RE: [PHP] security
At 22.04.2002 15:17, you wrote:
>
>Search archives, as a tip I'd suggest to encrypt the Credit Card
>numbers with RC4 or some other algorithm.
Maxim,
I don´t agree your suggestion, as I mentioned earlier on the list, avoid
storing CC numbers
unless it´s absolutely necessary, you´ve got a good insurance, and are
your own ISP knowing a lot of network security. Your suggestions may
make php-coder think that it is possible to store these data secure. But
that´s
not only
depending on php. If you store any data in an ISP-environment, you
cannot be shure that this is secure, as you don´t know how they set up
their servers,
firewalls ...
I wouldn´t give this suggestion without any word on this.
Oliver
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php