Eiolon Posted January 21, 2013 Share Posted January 21, 2013 I need to connect to a database that happens to store the users' passwords in plain text. This is simply to authenticate them then the connection is closed. Is there anything that I can do when connecting, besides the usual validation and sanitization, to make it secure? I am thinking about doing SSL if that is possible but I am out of ideas. I do not have the ability to change their policy on plain text passwords. Quote Link to comment https://forums.phpfreaks.com/topic/273408-connecting-to-a-database-that-stores-the-password-in-plain-text/ Share on other sites More sharing options...
requinix Posted January 21, 2013 Share Posted January 21, 2013 (edited) Unless you have to adhere to some specific guidelines, you don't need an SSL connection to the database. Edited January 21, 2013 by requinix Quote Link to comment https://forums.phpfreaks.com/topic/273408-connecting-to-a-database-that-stores-the-password-in-plain-text/#findComment-1407185 Share on other sites More sharing options...
White_Lily Posted January 22, 2013 Share Posted January 22, 2013 you could make the password itself more secure and just not do it in plain text, but thats all you can do really. Quote Link to comment https://forums.phpfreaks.com/topic/273408-connecting-to-a-database-that-stores-the-password-in-plain-text/#findComment-1407449 Share on other sites More sharing options...
Christian F. Posted January 22, 2013 Share Posted January 22, 2013 White_Lily: He already explained that he can't. I do not have the ability to change their policy on plain text passwords. Quote Link to comment https://forums.phpfreaks.com/topic/273408-connecting-to-a-database-that-stores-the-password-in-plain-text/#findComment-1407455 Share on other sites More sharing options...
White_Lily Posted January 22, 2013 Share Posted January 22, 2013 Oh okay sorry, misread that bit >_< Quote Link to comment https://forums.phpfreaks.com/topic/273408-connecting-to-a-database-that-stores-the-password-in-plain-text/#findComment-1407461 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.