Re: why would i want to put my mysql password in the yml file?

Wouldn't you have to store the password SOMEWHERE? This comes up
periodically on the list so do a search to find what discussion has
already been had.

Anyway, if you encrypt the password then somehow it would have to be
decrypted, so you'd have to keep a readable key somewhere. Bottom
line is that as long as you have correct file permissions you'll be
fine.

Pat


On 2/10/06, trevor <trevor@xxxxxxxxxxxxx> wrote:
hello - i'm new!

i don't understand - the tutorial says to edit the database.yml file and
put in the username and password, so that RoR can connect to the
database.


am i MISSING something here??

how can it be secure to put my username and password in a TEXT file,
with no encryption or anything? i thought that the days of storing u/p
in a text file had kinda gone away a while ago...

obviously i'm missing something here...any advice would be great, and
like i said i'm new (as in about one hour!)

thanks / trevor

--
Posted via http://www.ruby-forum.com/.




.

Relevant Pages

  • Re: searching for encrypted fields in data columns
    ... just encrypt the password a hacker can use brute force to easily (not to me ... store this in the db. ... an encryption from the username, ... > on it but instead use the native db search/sort capabilities. ...
    (comp.lang.java.databases)
  • Re: storing a username and password
    ... > I have a WEB app that occasionally needs access to a specific username and ... I don't want to store them in plain text. ... My thought is to encrypt ... > the username and password and store the encrypted values in the WEB.config ...
    (microsoft.public.dotnet.security)
  • Re: storing a username and password
    ... protection of you data to protection of your logon password... ... I don't want to store them in plain text. ... > the username and password and store the encrypted values in the WEB.config ...
    (microsoft.public.dotnet.security)
  • Re: WSE 3.0 + UserNameToken without X.509 Cert/Kerberos + Signing + Encryption How?
    ... message security and thefore it does not encrypt the message. ... You need to combine this assertion with a secure transport like SSL if you ... between client and server using a UserNameToken that passes the UserName ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: WSE 2.0 SP2: UsernameTokens must be encrypted to request SCT?
    ... William Stacey, MVP ... > The SecurityTokenServiceClient class will now automatically encrypt any ... > Username tokens included in a request. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)