This topic is locked
[SOLVED]

 SSL database connection

12/15/2010 11:07:05 AM
PHPRunner General questions
T
tedwilder author

Hello I cant seem to find any security feature!
1/ I dont see an ssl connexion option in phprunner. so connexion between phprunner developer and mysql server is not crypted. ( ssh tunnel are annoying)
2/ in the application that is created with phprunner I dont see any use of ssl :dbconnection.php doesnt include any ssl functionality..
Do you plan to implement ssl ?
thank you.

Admin 12/15/2010

If you use MySQL you can put phprunner.php to HTTPS server and encrypt all data transfer between PHPRunner and database.
Not sure why you need to encrypt anything between PHP and MySQL if they are located on the same server.

T
tedwilder author 12/23/2010



If you use MySQL you can put phprunner.php to HTTPS server and encrypt all data transfer between PHPRunner and database.
Not sure why you need to encrypt anything between PHP and MySQL if they are located on the same server.


you did not understand : when we open phprunner it asks for connection to a database server right? there is the problem : we cant connect trhough ssl! we use a plain text unencrypted connection on port 3306 (mysql) ! phprunner software > mysql server |your dev computer > your host = not encrypted !! the only solution for now is to have a Plink ssh tunnel to tunnel and encrypted port 3306 so connection between dev computer and sql server is encrypted. this is not very nice. Implementing a ssl support inside your software would be much better.

Then the application outputed by phprunner doesnt use SSL either. Installing under https wont do much if database is not on web server.

Admin 12/23/2010

If you need to secure the connection between PHPRunner and MySQL database put phprunner.php to HTTPS website thus encrypting all data transfer between PHPRunner and database.
If you need to secure the connection between generated PHP application and your database server (located on another machine) check this article:

http://www.madirish.net/?article=244
Note that you don't have to change a thing in PHPRunner or in PHPRunner-generated code.

T
tedwilder author 12/24/2010

p

Admin 12/24/2010

?

T
tedwilder author 1/4/2011

sorry It's just that I posted a reply but realise after it was useless and I can't seem to find a way to delete my own post.. so I had to enter at least one character. maybe you could enable if it exists the "delete own reply" .

thanks.