Re: SQLite security

From: Date: Mon, 23 Aug 2004 11:24:12 +0000
Subject: Re: SQLite security
References: 1  Groups: php.internals 
Request: Send a blank email to internals+get-12294@lists.php.net to get a copy of this message
At 13:56 23/08/2004, Adam Q wrote:
Dear all, I feel I may have uncovered a potentially large difficulty for the adoption of SQLite. I think encryption for SQLite is essential for PHP. Without it, it makes it almost useless in a webscripting language.
Why is that? You would have to gain file-level access on the server in order to read any data. With properly set permissions and reasonable security, that shouldn't be possible. I think that most database setups in general don't keep their information encrypted, and the reasons they use username/password pairs is mainly because (a) they're designed to serve multiple users (at the OS level) on the same machine, and (b) they're designed to be accessed over the network. Do you have some specific concern in mind? Zeev

« previous php.internals (#12294) next »