Unless I've missed something all this time I haven't seen anything in the core code that would have you do it any other way. Your code is pretty standard. I...
One thing that I've done that helps is add a a boolean var called suppressLayout to the attributes array that I always check before setting the layout file &...
Anyone here storing credit cards in the db? If so, how much are you encrypting? Right now I'm just encrypting the number, but the paranoid side of me has me...
I guess the more encrypted the better. How are you encrypting and decrypting this? The only secure way I can think of is using public / private key encryption...
dont forget that if you store sensative data like this you need to be aware of certain privacy and data protection acts based on where you live. just a...
I'm using Mcrypt with TripleDES. This was recommended by PHP Cookbook The script has to be able to unencrypt them at times because it has to periodically post...
Hi Derek If I understand what you are doing then there is a problem in that if your server is broken into then someone only needs to find a few lines of your...
i'm a newbie but can't you encrypt with a key/password and then when someone wants to look at the credit card number, they would be prompted for the ...
Yes, but that doesn't lend itself well to automation i.e. a cron job that batches transactions. Unless I'm missing something... -Derek ... From: Rob...
... That's correct. For it to be (much, much more) secure, there has to be some human intervention. For example, manually entering the private key over SSL...
... You took the words right out of my fingers Alan. Derek, I don't want to be a prophet of doom but I wonder what sort of hosting this is running on. If its...
... FWIW it's a dedicated server over which I am the only person with access. ... Any recommendations? I'm using Echo - http://www.openecho.com - which does ...
... No I don't really have a recommendation. That idea came to mind because I'd seen it at places like 2checkout.com and paysystems.com but they are for people...
When Derek mentioned the concept of billing credit card numbers automatically with CRON, I heard the cash registers go off and saw myself being fanned by...
Hi ... One way encryption is good for many things one being passwords. If my password is 'foo' and it is stored with one-way encryption it will be something...
... <<< Store passwords as an md5 hash and you won't ever have to worry about someone possibly getting their hands on them and using them maliciously. If...
... If the encryption method is deterministic (which md5 is), it's a good way to store passwords so it's impossible even for the database owner to know them. ...
hi sorry i havent read the remainder of the thread with this but md5 isnt really encryption.. its a one way hash value.. and its irriversable.. sorry my ...
mr scruggs cheers for the advertisement in your email.. thats really neat. >:\ ... ===== __________________________________ Do you Yahoo!? The New Yahoo!...
Hello, This email message is a notification to let you know that a file has been uploaded to the Files area of the PHP-fusebox group. File :...
PHP-fusebox@yahoogrou...
Oct 19, 2003 3:25 pm
2172
Hello, This email message is a notification to let you know that a file has been uploaded to the Files area of the PHP-fusebox group. File :...
PHP-fusebox@yahoogrou...
Oct 19, 2003 3:27 pm
2173
I have a problem with some programs, I am using 4 frames, 3 of them are for input data, the top frame is using for input information (right now only alow show...
Where would be a good place to put the database connect/disconnect scripts for a mySQL database? Currently, I have an act_connectDatabase.php and an ...
I put my DB connection in an fbx_Settings file. (Either the root fbx_Settings file, or a circuit-specific one if the db use is only related to that one...
this depends on how much your site relies on the database.. putting your database connection in fbx_settings assumes that most of your files will require...
... most of your files will require access to the database since settings is always read and therefore for each page view a database connection will be...
Mr. Young, i didnt not intend this reply to you specifically these comments were indeed for the orignonal poster, i must have clicked the wrong link due to the...