I asked earlier about a way to hide my password in the script, when calling 
an SQL connection with a line like:

my($db) = new Win32::ODBC("fileDSN=myodbc.dsn; uid=myID; pwd=mysecret");

No answers, so let me ask another way:  what steps should we take to keep 
our scripts and embedded passwords safe from prying eyes?  

I've found very little on how to secure my cgi scripts on the server.  Once 
I moved them to a new server and was horrified to find that when they were 
called by http, they gave a listing instead of running!

So, what SHOULD we be doing?  Any pointers or links?


-Brian


-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to