> So, the question is, can someone go through these (public) web pages and
> access the postgresql database if the postgresql server is running on
> the private machine?
>
> We have other data in the postgresql and would like to only have to use
> one database types, i.e., postgresql.
If you are using proper host control then yes you can make it so that
the PHP user is only able to access the public data in the private
database. See here:
http://www.postgresql.org/docs/8.3/static/client-authentication.html
http://www.postgresql.org/docs/8.3/static/user-manag.html
Sincerely,
Joshua D. Drake
--
PostgreSQL - XMPP: jdrake@jabber.postgresql.org
Consulting, Development, Support, Training
503-667-4564 - http://www.commandprompt.com/
The PostgreSQL Company, serving since 1997