> When doing the following at the command-line or in a shell script on
> CentOS:
> 
> mysql -h domain.com -u login_account -pPASSWORD_GOES_HERE
> 
> Q: Is the password being sent "clear" over the internet? If so, is
> there a way to do this securely? Thanks!

It's not necessarily being sent clear text:

http://dev.mysql.com/doc/refman/5.1/en/password-hashing.html

However, what's considered secure is relative.

-- consider tunneling over SSH, or using SSL connections:
http://dev.mysql.com/doc/refman/5.1/en/secure-connections.html

-- consider the risk of putting your password in a shell script, or command
line (ie, shell history)

H


_______________________________________________
New York PHP Community MySQL SIG
http://lists.nyphp.org/mailman/listinfo/mysql

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php

Reply via email to