Posted by Chung Leong on 05/10/06 01:52

marcelo6@gmail.com wrote:

> I think encrypt data directly with php is better because the
> information is sent directly encrypted to database server, but i not
> sure.
>
> Thanks

I would say, theoretically, performing the encryption is safer on the
database, as PHP runs in a more vulnerable user account. The database
server is typically protected by a firewall, whereas the web server is
open to the Internet.

[Back to original message]