Re: [PHP-DB] Re: password in md5 to connect to mysql instead of clear password

2005-02-28 Thread Gael Lams
Hi All, Thanks for all the answers received :-) I understand now that, if someone can read the md5 hash, he/she can connect. I will check later the certificate stuff. What I will do for time being will be to: - move the php connection file out of the web root - change the privileges so that

Re: [PHP-DB] Re: password in md5 to connect to mysql instead of clear password

2005-02-28 Thread Simon Rees
On Monday 28 February 2005 13:52, Gael Lams wrote: Simon, I read your post regarding the use of a C program and I would be interested in having some more details as we started thinking about implementing something similar. Unfortunately I've misplaced the program I'd used in the past to do

[PHP-DB] Re: password in md5 to connect to mysql instead of clear password

2005-02-25 Thread Unknown W. Brackets
Gael Lams, The problem is, MD5 is non-reversible. Any encryption you use that is non reversible... obviously cannot be reversed, right? If it can't be reversed, that's what you have to send for the connection - and anyone sending that will get through just fine. Here, let me explain. If you