RE: OT: Securing username and password in script file

2001-11-14 Thread Tim Hewitt
Gordon Burditt [mailto:[EMAIL PROTECTED]] wrote: > > There's a problem here: you need to have whatever > information is needed to access MySQL (or any other database) > in those files. If someone else on the same machine can get > that information, he can also access the database. It > does

RE: OT: Securing username and password in script file

2001-11-12 Thread Tim Hewitt
Arjen G. Lentz [mailto:[EMAIL PROTECTED]] wrote: > >Hi Tim, > >- Original Message ----- >From: "Tim Hewitt" <[EMAIL PROTECTED]> > >> It would be nice if mySQL supported some form of encrypted login where >> the username and password could be dec

RE: OT: Securing username and password in script file

2001-11-12 Thread Tim Hewitt
Peter Lovatt [mailto:[EMAIL PROTECTED]] wrote: > >This is not really a problem for me now, because I have my own server, >and control who has access. This is a problem on virtual hosting, >because anybody could be on there. You are exactly correct. This problem is huge on virtual hosting accoun

Securing username and password in script file

2001-11-10 Thread Tim Hewitt
How does one go about securing database access username and password information that's kept in a script's config file? Most of the PHP and Perl applications floating around Sourceforge, as well as most of the commercially available scripts, store the database access username and password in a co