I have several customer sites built with comersus shop cart. One of my customers has the site hosted in a shared server, so hosting service technicians have access to all files located in the server.
Is there any way to protect database main connection password located inside ASP scripts?
Or should I suggest a dedicated server?
There's no way to protect the password if it's stored in a plain ASP-script. So, I don't really see any other alternatives than he gets storage on another server (it could be a dedicated server, yes)
You could put an md5 hash of the password in another database/table or something...not perfect but perhaps more secure.
The password has to be in plain text if it shall be used for connecting to the database.
I guess this is a problem with all other programming languages like PHP and ASP... maybe others too.
There are currently 1 users browsing this thread. (0 members and 1 guests)
Bookmarks