Hello Ilia,

  also an ISO/shared server will never be securewhatever you do and you can
make MySQL disaalow external connections. That basically means in those
scenarios you do not need any authentication at all and thus get better
speed as in more responses. Now is that bad?

best regards
marcus

Friday, October 20, 2006, 4:26:01 PM, you wrote:

> On 20-Oct-06, at 10:24 AM, Lukas Kahwe Smith wrote:

>> Ilia Alshanetsky wrote:
>>
>>>> its funny that ext/mysql is supposed to stay around for BC  
>>>> reasons even in PHP6, yet it has known unsolvable security issues.
>>> Such as?
>>
>> for example, it does not support the new more secure authentication  
>> protocol.

> Which matters little since you can connect to MySQL via SSH tunnel  
> ensuring all communication is encrypted or communicate via a UNIX  
> domain socket with a local MySQL server.

> Ilia Alshanetsky




Best regards,
 Marcus

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to