Re: Securing PHP scripts - Mailing list pgsql-php

From Martin Marques
Subject Re: Securing PHP scripts
Date
Msg-id 200308190830.28167.martin@bugs.unl.edu.ar
Whole thread Raw
In response to Re: Securing PHP scripts  ("Cody Phanekham" <Cody.Phanekham@salmat.com.au>)
List pgsql-php
El Mar 19 Ago 2003 00:08, escribió:
> I should of mentioned that the server is a dedicated PHP / PostgreSQL
> server, therefore no other user would have access to it.
>
> My only concern is *if* the server gets compromised, then the attacker
> would have access to the DB without too much effort.

IF the attacker compromises your server access, I think there will be other
things to be MORE concern about.

--
Porqué usar una base de datos relacional cualquiera,
si podés usar PostgreSQL?
-----------------------------------------------------------------
Martín Marqués                  |        mmarques@unl.edu.ar
Programador, Administrador, DBA |       Centro de Telematica
                       Universidad Nacional
                            del Litoral
-----------------------------------------------------------------


pgsql-php by date:

Previous
From: Gerd Terlutter
Date:
Subject: Re: Authentication Failure with pg_pconnect
Next
From: Joe Nilson Zegarra Galvez
Date:
Subject: Postgres connection