Without CGI::Session you have

With CGI::Session you at least avoid the second part. And if you have readable passwords in one place, one more place won't make that much of a difference.

No matter how you slice it, your apache process must be able to read the passwords to verify them. And it must be able to read your script. So even if you encrypt your passwords to protect them, the bad guys can just read your script, and use that to decypt the passwords.

Face it: you can't secure passwords on a server where other people have root. Root, if no-one else, can read everything.

You have to make a weighted decision: are your passwords valuable? If they are, get your own server, and be the only one with root. If they aren't worth the cost of a separate server, perhaps no-one will bother getting an account on that exact shared server just to steal your passwords.

Just one caveat (I know it's not what you're asking, but it's worth mentioning): Do not ever accept credit cards (or Ghu forbid store credit card info) on a shared server. Because that is just asking for trouble.

Get your own server, or have the CC transactions handled by a merchant service, but if you're on a shared server, don't do it yourself.

In reply to Re: CGI and saving passwords by matija
in thread CGI and saving passwords by JoeJaz

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.