[PHP-DB] encryption of critical data

[youx]

Hi,
Can someone provide me some information about encryption and decryption of critical 
data such as credit number card in order to stock them on a mysql database in a secure 
way.

What I want to do is making a web interface secured via SSL in order to be able to 
consult some people information. As I don't want the critical information to be 
plaintext on the db, I'm searching for a way to get it encrypted and then decrypted 
when I'm consulting via the interface.

 I've read the php.net documentation and many articles about data 
encryption/decryption but both of them stand theorical about the various algorithms.

Do you know the more secures of them and the way to use them ? 
Do you know people working in the same way or do they prefer another kind of more 
secure solution ?

Thank you for your advice,
R.

RE: [PHP-DB] encryption of critical data

[Peter Lovatt]

HI

If you are using MySql look at ENCODE() on mysql.com

http://www.mysql.com/doc/M/i/Miscellaneous_functions.html


Most databases support some sort of encryption. Encrypting by php is
probably more secure - somebody might be able to sniff data going to the
database if it still plain text, but that is a small risk IMHO, and getting
the database to do it is easy .

HTH

Peter

---
Excellence in internet and open source software
---
Sunmaia
www.sunmaia.net
[EMAIL PROTECTED]
tel. 0121-242-1473
---

 -Original Message-
 From: youx [mailto:[EMAIL PROTECTED]]
 Sent: 27 June 2002 14:12
 To: [EMAIL PROTECTED]
 Subject: [PHP-DB] encryption of critical data


 Hi,
 Can someone provide me some information about encryption and
 decryption of critical data such as credit number card in order
 to stock them on a mysql database in a secure way.

 What I want to do is making a web interface secured via SSL in
 order to be able to consult some people information. As I don't
 want the critical information to be plaintext on the db, I'm
 searching for a way to get it encrypted and then decrypted when
 I'm consulting via the interface.

  I've read the php.net documentation and many articles about data
 encryption/decryption but both of them stand theorical about the
 various algorithms.

 Do you know the more secures of them and the way to use them ?
 Do you know people working in the same way or do they prefer
 another kind of more secure solution ?

 Thank you for your advice,
 R.



-- 
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php