Home  >  Article  >  Backend Development  >  During development, how to securely manage database accounts, passwords, and secret keys in the official environment?

During development, how to securely manage database accounts, passwords, and secret keys in the official environment?

WBOY
WBOYOriginal
2016-09-28 08:54:081428browse

During development, how are the database accounts, passwords, and keys in the official environment stored?

Store to configuration file?
Store in environment variables?

This way developers can see these passwords.

How can we let fewer people know these key passwords?

Reply content:

During development, how are the database accounts, passwords, and keys in the official environment stored?

Store to configuration file?
Store in environment variables?

This way developers can see these passwords.

How can we let fewer people know these key passwords?

OP configure a directory with high permissions and write the configuration. In this way, only the OP can maintain the online account, and other programs or employees can only read it. If even internal employees of the company are not allowed to see it, then. . .

It can be encrypted and stored. The simplest one is base64, which can be used to deal with newbies, or it can be made into a class library and then packed or something. In fact, it is not necessary

Statement:
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn