Re: running postgresql on a private machine accessing it from public web pages

From: "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>
To: "Keith D(dot) Evans" <evans(at)umbc(dot)edu>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: running postgresql on a private machine accessing it from public web pages
Date: 2009-05-21 17:02:29
Message-ID: 1242925349.16418.12.camel@jd-laptop.pragmaticzealot.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general


> So, the question is, can someone go through these (public) web pages and
> access the postgresql database if the postgresql server is running on
> the private machine?
>
> We have other data in the postgresql and would like to only have to use
> one database types, i.e., postgresql.

If you are using proper host control then yes you can make it so that
the PHP user is only able to access the public data in the private
database. See here:

http://www.postgresql.org/docs/8.3/static/client-authentication.html
http://www.postgresql.org/docs/8.3/static/user-manag.html

Sincerely,

Joshua D. Drake

--
PostgreSQL - XMPP: jdrake(at)jabber(dot)postgresql(dot)org
Consulting, Development, Support, Training
503-667-4564 - http://www.commandprompt.com/
The PostgreSQL Company, serving since 1997

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Merlin Moncure 2009-05-21 17:29:11 Re: Postgres, DB design, and object IDs (of any ilk)
Previous Message Keith D. Evans 2009-05-21 16:41:05 running postgresql on a private machine accessing it from public web pages