Re: looking for a secure - Mailing list pgsql-general

From Svenne Krap
Subject Re: looking for a secure
Date
Msg-id 8e1emt0o6prtk7q06cv09ia5dli5kpdh1j@4ax.com
Whole thread Raw
In response to looking for a secure  (Fran Fabrizio <ffabrizio@mmrd.com>)
List pgsql-general
On Tue, 31 Jul 2001 16:55:07 +0000 (UTC), ffabrizio@mmrd.com (Fran
Fabrizio) wrote:

>Here's our setup...

[huge snip]

Please consider, I do not know the exact demands for you application
or anything, but the following seems quite easier to maintain in my
eyes:

You wrote you needed a C-program, what's wrong with making it all
webbased. Then your webserver could have two NICs, with the database
access on the internal one.
It also has the advantage, that use need only 1 account in the
database, the rest is just business logic.

For the webbased interfaces, unless you think about using a raw
interface like PhpPgAdmin (and write it yourself), it should be safe.
Ie. no need to worry about people seeing too much (as only the
webserver, with is reasonably trustworthy, access the data - using
scripts you control)

Regards

Svenne
--
Mail usenet@krap.dk - svenne@krap.dk - PGP key id : 0xDF484022
ICQ: 5434480 - http://www.krap.dk - http://www.krap.net
PGP Key http://keys.pgp.dk:11371/pks/lookup?op=get&search=0xDF484022

pgsql-general by date:

Previous
From: Richard Huxton
Date:
Subject: Re: looking for a secure
Next
From: Joseph Shraibman
Date:
Subject: Re: Unexpected *ABORT STATE*