August 18, 200917 yr Hey guys, i'm busy working on a site for a friend which involves me needing to allow for members of his sports club to add personal details. I need the information they upload to be as secure as possible but tbh don't really know what i can do other than encrypt the data before adding it to the database. What standards should i follow in securing this data? Any input would be helpful Thanks, Jonny
August 18, 200917 yr Cryptography doesn't always work. you can still cause a lot of damage without exploiting the addresses. To help secure you need to restrict your scripts and ensure security so as to prevent potential weaknesses. A good start is to make sure your database connection file is held outside the public directory tree.
August 18, 200917 yr Cryptography doesn't always work. you can still cause a lot of damage without exploiting the addresses. To help secure you need to restrict your scripts and ensure security so as to prevent potential weaknesses. A good start is to make sure your database connection file is held outside the public directory tree. An example of the database connection file being outside the public tree will be like this On a unix system, or one like mine, public_html is the only file that users can access when they visit your site level one - public_html(folder) DBconnectfile.php level two - website files And to include the file you simple use ../DBconnectfile.php in your source, hope that is clear enough. Ben
August 19, 200917 yr Author Sorry, the folders i have are htdocs, logfiles and private. I currently store all my files in the htdocs folder as (unless i have missed something) this is where the index.php file is stored. I currently have my db connect file stored there aswell. Could you give me another quick example to show how it would work with the setup i have. Thanks in advance, Jonny.
August 26, 200917 yr Author Sorry, the folders i have are htdocs, logfiles and private. I currently store all my files in the htdocs folder as (unless i have missed something) this is where the index.php file is stored. I currently have my db connect file stored there aswell. Could you give me another quick example to show how it would work with the setup i have. Thanks in advance, Jonny. anyone able to shed any light?
Create an account or sign in to comment