in reply to Securing the database password for web applications
Create separate system user accounts for each database user and use suEXEC. Then place the passwords into the user's home directory, readable only by that user
That way, even if one account gets compromised somehow, the attacker can only read the database password of this individual user.
|
|---|
| Replies are listed 'Best First'. | |
|---|---|
|
Re^2: Securing the database password for web applications
by hardburn (Abbot) on Mar 08, 2005 at 21:00 UTC | |
by tirwhan (Abbot) on Mar 08, 2005 at 22:52 UTC |