[EMAIL PROTECTED] wrote:
...
By the way, this is an *intra*net-solution, and we don't have hackers
in our staff, I hope...
Cross your fingers - most compromises come from inside the firewall.
Cheers,
Steve
--
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes
In our web-based-solution (PHP) the database credentials (username and password) are encrypted and stored by PHP as session-Variables.Yes, there is the risk, they could be read by someone, who has access to the apache-sessions-directory, but this user also must have access to the php-scripts with