Re: Designing a secure database?

2003-08-14 Thread Nils Valentin
Hi Steve, I understood that usually the data required to connect to a db is stored in a outsorced php file. For mysql clients you can define usernamepassword etc. in the my.cnf configuration file, but I am not sure if a PHP client would access this file. Best regards Nils Valentin

Re: Designing a secure database?

2003-08-14 Thread Yves Goergen
as far as i know, php won't by default log in as some my.cnf user. but you can set a default username/passwort/dbname etc. in the php.ini, should be in the [mysql] section. as a little additional 'security' (if one could call it that) can be achieved by masking the username/password in the php

RE: Designing a secure database?

2003-08-14 Thread Rob A. Brahier
Steven, I'm currently running a LAMP setup much like the one you described. A plain text username and password is really the best way to go for giviing PHP what it needs to access MySQL. There are other options, but they are a lot of work to implement and in my opinion not worth the

RE: Designing a secure database?

2003-08-14 Thread Adam Nelson
The point of the hash is that it doesn't matter who sees the data, right? username | passwordhash | ipaddress | permission adam | AALKJA2344AFDS | 10.1.1.1 | rwxrwxr-- jake | 45324AFSDAF3423 | 10.1.1.1 | rwxrwxr-- tyrone | AALKJFF323FSDAF | 10.1.1.1 | rwxrwxr-- All you can ever do is compare