Posted by Jerry Stuckle on 10/03/06 19:57
livefreeordie wrote:
> Hi,
>
> I'm part of a 5-person team that develops websites for our company. I
> need to use the ftp_* functions to find some files on another file
> server. I need to authenticate to the file server using my username &
> password but I don't want to have it right there in the script in plain
> text.
>
> Any suggestions?
>
Encrypt the password and decrypt it just before sending it. Not really
safe; if someone else has access to the encrypted password and the
decrypt code they can easily decrypt it.
Or you could force the user to enter it in a browser.
But there's not a lot you can do to protect passwords when others have
access to the source code, also.
--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attglobal.net
==================
Navigation:
[Reply to this message]
|