I might be missing something here, but... maybe you should
differentiate the two functions that are currently served
by the password: (1) validating the person posting the request
vs. (2) logging into the database. If your DB status report
includes stuff that you don't want to make public (and/or
you don't want the public pinging your DB at will), then
do something for validation -- whatever's workable and
adequate -- that does not involve sending the login password.
Put the actual DB login password in the code itself --
actually, in a module or "require" file that's readable
when the script executes under the web server, but is not
directly under $webhome.
Warning: I haven't researched this idea to figure out
how vulnerable it might be (if anyone has facts or data on
this, I'd love to hear it), but it seems safer than having
( $user_validation eq $rootlogin ) going through sniffable
switches, even granting that it's only "DB root" that we're
talking about here (I hope that's all you're talking about).
Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
Read Where should I post X? if you're not absolutely sure you're posting in the right place.
Please read these before you post! —
Posts may use any of the Perl Monks Approved HTML tags:
- a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
| |
For: |
|
Use: |
| & | | & |
| < | | < |
| > | | > |
| [ | | [ |
| ] | | ] |
Link using PerlMonks shortcuts! What shortcuts can I use for linking?
See Writeup Formatting Tips and other pages linked from there for more info.