in reply to How can a script use a password without making the password visible?

without a coder who is editing the script being able to view the password?

No. The coder/script will obviously see what it will pass to the service/database.

  • Comment on Re: How can a script use a password without making the password visible?

Replies are listed 'Best First'.
Re^2: How can a script use a password without making the password visible?
by choroba (Cardinal) on Mar 01, 2017 at 18:00 UTC
    That's not necessarily true. The coder can run the script in the dev environment, so they can see the dev database password. But the production db passwords remains hidden to them.

    Moreover, the coder can't change the code to show the password. Such a change wouldn't pass the code review.

    ($q=q:Sq=~/;[c](.)(.)/;chr(-||-|5+lengthSq)`"S|oS2"`map{chr |+ord }map{substrSq`S_+|`|}3E|-|`7**2-3:)=~y+S|`+$1,++print+eval$q,q,a,

      Note that the OP wants to hide the password *from the script*. Even in that scenario, the script will still see the password.

      But yeah, it's a good point that access to both the production password and the production script should be controlled.

        For the record, I never asked to hide the password from the script.