Wrox Programmer Forums
Go Back   Wrox Programmer Forums > PHP/MySQL > Pro PHP
|
Pro PHP Advanced PHP coding discussions. Beginning-level questions will be redirected to the Beginning PHP forum.
Welcome to the p2p.wrox.com Forums.

You are currently viewing the Pro PHP section of the Wrox Programmer to Programmer discussions. This is a community of software programmers and website developers including Wrox book authors and readers. New member registration was closed in 2019. New posts were shut off and the site was archived into this static format as of October 1, 2020. If you require technical support for a Wrox book please contact http://hub.wiley.com
 
Old June 3rd, 2005, 02:38 PM
Friend of Wrox
 
Join Date: Jun 2003
Posts: 249
Thanks: 0
Thanked 0 Times in 0 Posts
Default Encrypting Data

I am just looking for some direction here. I am working on a site that will be dealing with a lot of users personal data, such as SSN, addresses, etc. Some of this information I would need to encrypt and it will be stored in a MySQL database. I have read some about crypt() and md5. These are one way encryption, what I am looking for is some way to allow the user to update their information so these would not work. What else should I look into? What is the safest secure way of dealing with this?

Thanks
Mike
__________________
Peace
Mike
http://www.eclecticpixel.com
 
Old June 3rd, 2005, 02:53 PM
Friend of Wrox
 
Join Date: Jun 2003
Posts: 101
Thanks: 0
Thanked 1 Time in 1 Post
Send a message via AIM to Moharo
Default

hey harpua

what infomation do you want to encrypt and what will users be able to update? :D .... that can help me answer your question....

www.campusgrind.com - college portal
 
Old June 3rd, 2005, 02:59 PM
Friend of Wrox
 
Join Date: Jun 2003
Posts: 249
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Hey Moharo
One field is social security numbers, I have it set as a varchar. There are some financial information also which I have as decimals. This is read only, so I can change datatypes if necessary.

Thanks
Mike

Peace
Mike
http://www.eclecticpixel.com
http://www.homegrownmusicjam.com
 
Old June 4th, 2005, 01:15 AM
Friend of Wrox
 
Join Date: Mar 2004
Posts: 357
Thanks: 0
Thanked 0 Times in 0 Posts
Send a message via Yahoo to anshul
Default

md5() is good to use for managing passwords.
If you are sending credit card numbers or other similar confidential information to client browser, consider purchasing a SSL certificate. Do you think, someone will connect to your database and retrieve all important information? You need see PHP manual for some algorithm that uses a key plus argument for encryption-n-decryption, then.






Similar Threads
Thread Thread Starter Forum Replies Last Post
Encrypting config vikingsunil ASP.NET 2.0 Professional 1 August 28th, 2008 10:53 PM
Encrypting session cookie krisXp Classic ASP Databases 1 November 9th, 2006 10:21 AM
Encrypting numbers - newbie rosmucNet ASP.NET 2.0 Basics 0 April 19th, 2006 06:33 AM
Encrypting and Decrypting chipset VB How-To 0 July 27th, 2004 07:36 AM
querystring encrypting invitro Classic ASP Professional 1 April 5th, 2004 10:45 AM





Powered by vBulletin®
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.
Copyright (c) 2020 John Wiley & Sons, Inc.