Security

How can I protect my passwords (MySQL, etc) stored on your servers?

Tags: • 

You may need to store passwords within files on your Rhombic Network account, such as MySQL passwords, HTTP authentication passwords, etc.

All Rhombic Network clients have system users that are part of the group “users”. Because a web server process will either use the user “www-data” or your own system user to access files, you can use standard UNIX permissions to prevent access to sensitive files.

To protect a file secret.php, run the commands through SSH:

chgrp users secret.php
chmod 604 secret.php

Doing this will prevent other Rhombic Networks users from being able to snoop your passwords and private data, but still be viewable or usable by a web server.

Syndicate content