Re: Storing sensitive data

From: <operationsengineer1(at)yahoo(dot)com>
To: Kevin Crenshaw <kcrenshaw(at)viscient(dot)com>, pgsql-novice(at)postgresql(dot)org
Subject: Re: Storing sensitive data
Date: 2006-03-09 17:33:11
Message-ID: 20060309173311.34187.qmail@web33310.mail.mud.yahoo.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-novice

> I have a table that stores usernames and passwords
> and I want to encrypt the
> passwords before they are stored in the database.
> Will postgresql do this
> for me, or do I have to do the encryption on the
> client side? Could you
> please point me to some instructions on how to
> accomplish this.
>
> Thanks for your help,
>
> kevin

i found this tutorial to be very helpful...

http://phpsec.org/articles/2005/password-hashing.html

it uses php, but i'm sure you could translate into
whatever language you are using.

i also found this helpfule, too.

http://www.sitepoint.com/article/users-php-sessions-mysql

it uses mysql, but i easily applied to my favorite db
- postgresql. not to mention adapting it to adodb and
my forms class.

between the two, you should get a decent user
management system.

good luck,

oe1

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com

In response to

Browse pgsql-novice by date

  From Date Subject
Next Message kynn 2006-03-09 18:37:30 Relations as arguments to a stored procedure?
Previous Message Neil Saunders 2006-03-09 13:30:41 Re: Storing sensitive data