Hi Andrew and Richard,
The password and connection info is scrambled up. You can look,  If
you want to check it out for your self look in the source code of
./mysql-3.23.XX/libmysql  search for the following functions.
especially in 'mysql_real_connect' function.   It is not the best
method,  but it is not clear text!

void hash_password(ulong *result, const char *password)
void make_scrambled_password(char *to,const char *password)
char *scramble(char *to,const char *message,const char *password,
               my_bool old_ver)

See ya
Ken

----- Original Message -----
From: "Andrew Braithwaite" <[EMAIL PROTECTED]>
To: "'Richard Fox'" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Thursday, September 26, 2002 1:49 PM
Subject: RE: Encrypted MySQL passwords


> Hi,
>
> My understanding is that it sends it plain text, then mysql encodes
it
> server-side & does the match.  There is client-server ssl planned
soon
> though...
>
> Cheers,
>
> Andrew
>
> -----Original Message-----
> From: Richard Fox [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, 26 September 2002 16:18
> To: [EMAIL PROTECTED]
> Subject: Encrypted MySQL passwords
>
>
>
> Hi,
>
> I am connecting to  a mysql server on a remote machine, and opened
up port
> 3306 for this purpose. But, I am concerned about sending a clear
text
> password, via the mysql_pconnect() call. My question is, what is the
> procedure for connecting to a remote server with an encrypted
password? Or,
> does mysql_pconnect handle this? THX, RIch
>
> sql
>
>
> --------------------------------------------------------------------
-
> Before posting, please check:
>    http://www.mysql.com/manual.php   (the manual)
>    http://lists.mysql.com/           (the list archive)
>
> To request this thread, e-mail <[EMAIL PROTECTED]>
> To unsubscribe, e-mail
> <[EMAIL PROTECTED]>
> Trouble unsubscribing? Try:
http://lists.mysql.com/php/unsubscribe.php
>
> --------------------------------------------------------------------
-
> Before posting, please check:
>    http://www.mysql.com/manual.php   (the manual)
>    http://lists.mysql.com/           (the list archive)
>
> To request this thread, e-mail <[EMAIL PROTECTED]>
> To unsubscribe, e-mail
<[EMAIL PROTECTED]>
> Trouble unsubscribing? Try:
http://lists.mysql.com/php/unsubscribe.php
>
>


---------------------------------------------------------------------
Before posting, please check:
   http://www.mysql.com/manual.php   (the manual)
   http://lists.mysql.com/           (the list archive)

To request this thread, e-mail <[EMAIL PROTECTED]>
To unsubscribe, e-mail <[EMAIL PROTECTED]>
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php

Reply via email to