php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #31564 Secure Password Storage
Submitted: 2005-01-15 16:52 UTC Modified: 2013-09-12 13:50 UTC
Votes:1
Avg. Score:4.0 ± 0.0
Reproduced:1 of 1 (100.0%)
Same Version:0 (0.0%)
Same OS:0 (0.0%)
From: OvdSpek at LIACS dot NL Assigned:
Status: Wont fix Package: *General Issues
PHP Version: 5.0.3 OS: *
Private report: No CVE-ID: None
View Developer Edit
 [2005-01-15 16:52 UTC] OvdSpek at LIACS dot NL 
Description:
------------
Hi,

Would it be possible to add secure password storage (mainly for database access) to PHP (when used as web server module) such that:
The passwords are per vhost.
The passwords can't be read by scripts themself in any way.
The passwords can only be read by the library (function) that actually uses them.
Multiple passwords can be stored. For example, a vhost could use five user/pass combinations to access five databases.

The advantage would be that passwords wouldn't be stored in normal PHP files (readable by scripts) anymore and that script configuration would be easier.

Reproduce code:
---------------
-

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2013-09-12 13:50 UTC] nikic@php.net
-Status: Open +Status: Wont fix -Package: Feature/Change Request +Package: *General Issues
 [2013-09-12 13:50 UTC] nikic@php.net 
Won't happen, because password management is too diverse to have some one-size fits all solution. There is no problem per-se that scripts can read passwords.
 
PHP Copyright © 2001-2026 The PHP Group
All rights reserved. 		Last updated: Sat Feb 14 04:00:01 2026 UTC