Paradigm wrote:
I want to store some passwords in a MySQL table. Is there any way of
preventing someone using say COntrolcentre from viewing the passwords.
You could restrict the privileges on that table. But if they have your
superuser password for your MySQL server, they can do anything anyway.
You should never store plaintext passwords in a database; store an MD5()
hash of the password, and when you need to validate a user's input
matches the password, check that MD5() of their input matches what's in
the database. This technique protects password privacy much better,
because it means no one can steal the original password string out of
the database -- not even you -- because it's not stored.
Regards,
Bill K.
