-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi, all --

I have, with the generous help of Michael Babcock, worked out what I
think is a reasonable way to protect the credit card numbers in my
database from improper access.  Basically, only the server (better yet,
some other server) can access the card numbers in the cards table. and
requests from the main database and application are pgp-signed while
returned results are pgp-encrypted.

So can any of this be implemented in the database, or is it all at the
application level with just GRANT privs in the ccard database?


TIA & HAND & Happy Holidays

mysql query,
:-D
- -- 
David T-G                      * There is too much animal courage in 
(play) [EMAIL PROTECTED] * society and not sufficient moral courage.
(work) [EMAIL PROTECTED]  -- Mary Baker Eddy, "Science and Health"
http://www.justpickone.org/davidtg/    Shpx gur Pbzzhavpngvbaf Qrprapl Npg!

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)

iD8DBQE+DQJVGb7uCXufRwARAqkaAKCwpkJKKlbbSfn8NUCfSKNybgL/XwCePXgg
TEgHYbgozvBRqmTbt5+hfZQ=
=IpwO
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
Before posting, please check:
   http://www.mysql.com/manual.php   (the manual)
   http://lists.mysql.com/           (the list archive)

To request this thread, e-mail <[EMAIL PROTECTED]>
To unsubscribe, e-mail <[EMAIL PROTECTED]>
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php

Reply via email to