From:             [EMAIL PROTECTED]
Operating system: Windows NT 4/SQL Server 7
PHP version:      4.1.0
PHP Bug Type:     MSSQL related
Bug description:  Trusted Connections Not Supported

I consider the inclusion of database usernames and passwords in scripts to
be a security risk.

In a Windows environment it is possible to access SQL Server via a trusted
connection.  This uses the context of the current logged in user.

Furthermore it is possible to configure IIS and presumably Apache to use a
particular user account to service requests.

It is therefore possible (for example under ASP) to open a database
connection without specifying a username or password in the script because
the context of the current user account has permission to access the SQL
Server.

I would be happy if this functionality could be implmented in the MS SQL
Server extension.
-- 
Edit bug report at: http://bugs.php.net/?id=14564&edit=1


-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to