Re: [PHP] Re: secure access

2002-10-09 Thread Vidyut Luther
1. SSL will encrypt the data sent between the browser and the server, 2. Depending on the database, it should have it's own authentication mechanism which the PHP script needs to pass before the database will allow access. 3. Depending on what you need to do, you can limit the use of system us

Re: [PHP] Re: secure access

2002-10-09 Thread Chris Hewitt
If you use a .htaccess file in the directory (assuming Apache), a popup box asks for username/password. The password is MD5 encrypted. I think the downside is php getting access to these, or maybe I'm wrong in this. HTH Chris Anup wrote: >I belive you can have the file atleast one directory b

[PHP] Re: secure access

2002-10-09 Thread Anup
I belive you can have the file atleast one directory below your root web folder (so web surfers have no access, just your script). Also since the HTML->PHP is unsecure over HTTP, look into HTTPS , I believe this is related to SSL (Secure Socket Layer). Without SSL, you will be POSTing your user/pa