ID: 14564
Updated by: derick
Reported By: [EMAIL PROTECTED]
Status: Open
Old Bug Type: MSSQL related
Bug Type: Feature/Change Request
Operating System: Windows NT 4/SQL Server 7
PHP Version: 4.1.0
New Comment:

Making this a feature request

Previous Comments:
------------------------------------------------------------------------

[2001-12-17 11:12:07] [EMAIL PROTECTED]

I consider the inclusion of database usernames and passwords in scripts to be a 
security risk.

In a Windows environment it is possible to access SQL Server via a trusted connection. 
 This uses the context of the current logged in user.

Furthermore it is possible to configure IIS and presumably Apache to use a particular 
user account to service requests.

It is therefore possible (for example under ASP) to open a database connection without 
specifying a username or password in the script because the context of the current 
user account has permission to access the SQL Server.

I would be happy if this functionality could be implmented in the MS SQL Server 
extension.

------------------------------------------------------------------------



Edit this bug report at http://bugs.php.net/?id=14564&edit=1


-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to