Eiolon Posted January 21, 2013 Share Posted January 21, 2013 I need to connect to a database that happens to store the users' passwords in plain text. This is simply to authenticate them then the connection is closed. Is there anything that I can do when connecting, besides the usual validation and sanitization, to make it secure? I am thinking about doing SSL if that is possible but I am out of ideas. I do not have the ability to change their policy on plain text passwords. Link to comment https://forums.phpfreaks.com/topic/273408-connecting-to-a-database-that-stores-the-password-in-plain-text/ Share on other sites More sharing options...
requinix Posted January 21, 2013 Share Posted January 21, 2013 Unless you have to adhere to some specific guidelines, you don't need an SSL connection to the database. Link to comment https://forums.phpfreaks.com/topic/273408-connecting-to-a-database-that-stores-the-password-in-plain-text/#findComment-1407185 Share on other sites More sharing options...
White_Lily Posted January 22, 2013 Share Posted January 22, 2013 you could make the password itself more secure and just not do it in plain text, but thats all you can do really. Link to comment https://forums.phpfreaks.com/topic/273408-connecting-to-a-database-that-stores-the-password-in-plain-text/#findComment-1407449 Share on other sites More sharing options...
Christian F. Posted January 22, 2013 Share Posted January 22, 2013 White_Lily: He already explained that he can't. I do not have the ability to change their policy on plain text passwords. Link to comment https://forums.phpfreaks.com/topic/273408-connecting-to-a-database-that-stores-the-password-in-plain-text/#findComment-1407455 Share on other sites More sharing options...
White_Lily Posted January 22, 2013 Share Posted January 22, 2013 Oh okay sorry, misread that bit >_< Link to comment https://forums.phpfreaks.com/topic/273408-connecting-to-a-database-that-stores-the-password-in-plain-text/#findComment-1407461 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.