Current location: Hot Scripts Forums » Programming Languages » Perl » Encrypt (Hide) passwords


Encrypt (Hide) passwords

Reply
  #1 (permalink)  
Old 11-17-03, 06:57 AM
mh53j_fe mh53j_fe is offline
New Member
 
Join Date: Nov 2003
Posts: 1
Thanks: 0
Thanked 0 Times in 0 Posts
Encrypt (Hide) passwords

We have a perl login script that connects to our Oracle database. The only problem is that the Oracle user id and password are not encrypted. In other words, any human reviewing the module can see the ID and password.

Is there a Perl program that allows us to hide (encrypt) the ID and password so that human eyes can not see it.

Thanks to all for your help. I look forward to hearing your responses....
Reply With Quote
  #2 (permalink)  
Old 11-17-03, 09:14 AM
Chas Chas is offline
Coding Addict
 
Join Date: Oct 2003
Location: California
Posts: 359
Thanks: 0
Thanked 0 Times in 0 Posts
Your best bet is to search CPAN for crypt and/or decrypt. Most perl encryption is one-way so you will need to hunt for something that does both. The problem is that is your code can decrypt it, almost anyone looking at the code with a little perl experience can also figure out how to decrypt it.

I generally keep sensitive config data in a separate module (as a hash usually) that I can either just do or require into the my applications. That does two things: 1) It keeps this data out of the main applications and 2) If I have multiple applications using the same info, it's a single point of change for all applications cutting down on maintenance. I keep these moduls as well as most of my other modules in a private lib above the doc_root just to be safe. If Apache uses suEXEC, you can lock down that lib pretty tight preventing anyone but you and your applications from accessing. If there are multiple people with access to the server as your user, that wont help you too much.

~Charlie
Reply With Quote
Reply

Bookmarks


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
ASP.Net hide site in the tray??? gicio ASP.NET 1 08-26-04 10:00 AM
Members, Passwords, Data scrognoid PHP 1 07-29-03 05:54 PM
Members, Passwords, Data scrognoid New Members & Introductions 0 07-29-03 08:27 AM


All times are GMT -5. The time now is 04:46 AM.
vBulletin® Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.