-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

> BTW, what is the best current practice to pass ->connect ()
> $password to a command-line Perl script?

Best practice for Postgres (DBD::Pg) is to use a pgpass file:

http://www.postgresql.org/docs/current/static/libpq-pgpass.html

> Both specifying it via a command-line argument or via an
> environment variable (DBI_PASS) is insecure, as on some systems
> this information could easily be seen by the other users on the
> same host.

Well, how cross-system are you aiming to be? On some systems, 
this information is not visible to others, so problem solved. :)

- -- 
Greg Sabino Mullane g...@turnstep.com
End Point Corporation http://www.endpoint.com/
PGP Key: 0x14964AC8 201102161117
http://biglumber.com/x/web?pk=2529DF6AB8F79407E94445B4BC9B906714964AC8
-----BEGIN PGP SIGNATURE-----

iEYEAREDAAYFAk1b+LkACgkQvJuQZxSWSshjoACbBwrZFbIxecTYLfe8LruyY12g
15gAnjgobB1xf628eRnx6w6tEm3XFe7e
=bHIe
-----END PGP SIGNATURE-----


Reply via email to