Re: [GENERAL] Password safe web application with postgre*s*

2008-05-15 Thread Steve Crawford
[EMAIL PROTECTED] wrote: ... By the way, this is an *intra*net-solution, and we don't have hackers in our staff, I hope... Cross your fingers - most compromises come from inside the firewall. Cheers, Steve -- Sent via pgsql-general mailing list (pgsql-general@postgresql.org) To make changes

Re: [GENERAL] Password safe web application with postgre*s*

2008-05-15 Thread ludwig
In our web-based-solution (PHP)  the database credentials (username and password) are encrypted and stored by PHP as session-Variables.Yes, there is the risk, they could be read by someone, who has access to the apache-sessions-directory, but this user also must have access to the php-scripts with