in reply to Obscuring sensitive data in Perl code?

Don't put them in the source. Put them in a separate file, and pull in that file. Then be very careful whom you show that file to.

-- Randal L. Schwartz, Perl hacker

  • Comment on Re: Obscuring sensitive data in Perl code?

Replies are listed 'Best First'.
Re: Re: Obscuring sensitive data in Perl code?
by $code or die (Deacon) on Mar 11, 2001 at 23:10 UTC
    ++, but still, what is to stop someone from doing this to the original script: (pseudo-code)...
    my $db_password = get_password("filename"); print $db_password; # someone could insert this... my $dbh = DBI->connect(.....);
    I don't think there is any way around this is there? Security through obscurity (while obviously bad for other reasons) falls down on this issue too.

    $ perldoc perldoc
A reply falls below the community's threshold of quality. You may see it by logging in.