I would say it really all depends on your network configuration.  I am assuming
that your Web server running PHP is running on one machine (SERVER A)and the
MYSQL server running on another (SERVER B)outside of a common firewall?  Is this
accurate?

If this is true, then I would presume that PHP on SERVER A could encrypt a
datafile with MYSQL instructions and send it securely to SERVER B, but then who
would un-encrypt it and feed it to MYSQL?

You might want to look into other alternative like tunneling with SSH or
'stunnel'.  I remember hearing some about it, but have not real experience with
it.  do a search on some MYSQL mailing lists for some insight.  Or ask on the
PHP-DB mailing list and you may be able to target a better qualified audience.

-Brad

Joshua Minnie wrote:

> What about utilizing an encrypted text file then.  Would there be anything
> wrong with doing it that way?  I really don't have too much of an option as
> far as the server specs go because I didn't set up the web hosting.
>
> -Josh
>
> Brad Bonkoski wrote:
> > I think you may need to read:
> > http://www.php.net/manual/en/function.mysql-connect.php
> >
> > It appears that the SSL client flag for connecting to MYSQL is not
> available
> > until 4.3.0, but you can pick up the 4.3.0RC3 version now, and test it
> out!  I
> > _think_ this is what you are looking for.
> > HTH
> > -Brad
> >
> > Joshua Minnie wrote:
> >
> > > Hi all,
> > >     I was wondering if anyone could direct me to some good tutorials on
> how
> > > to utilize PHP to access a MySQL database behind SSL.  I have been
> searching
> > > PHPBuilder.com, PHPClasses.org, and hotscripts.com, and I can't seem to
> find
> > > any good tutorials for a beginner when it comes to SSL.  I do have a
> fairly
> > > good working knowledge of PHP and MySQL so I'm not necessarily looking
> for a
> > > guide on that, I just need to know how to pass encrypted data back and
> > > forth.  Here is the scenario:
> > >
> > > My client has a website in which a customer will be purchasing gift
> > > certificates online.  They don't need a comprehensive e-commerce
> package,
> > > just simple information passed across a secure connection, such as: user
> > > names, passwords, credit cards and mailing addresses.  We already have a
> > > MySQL db set up with the gift certificate "package" information.  I just
> > > need to be able to store the customer information for retrieval later by
> the
> > > owners of the site.
> > >
> > > Joshua Minnie
> > > [EMAIL PROTECTED]
> > > Independent Web Consultant / Developer
> > > Wild Web Technology
> > > www.wildwebtech.com
> > >
> > > ------------------------------------------------------
> > > Server Information:
> > >  + PHP v. 4.2.3
> > >  + Apache 1.3.26
> > >  + MySQL 3.23.53
> > > ------------------------------------------------------
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to