encryption - Storing sensitive data with Drupal -


i need use sensitive data drupal custom module use. if set them through gui, stored unencrypted in database. having access have access sensitive data.

i can see 2 solutions moment:

  1. find way securely store credentials database;
  2. put sensitive data credentials_inc.php file, include in settings.php set variables custom module use , make sure nobody else can read file.

which solution best according you? recommend? there other best option?

best regards.

i start off using securepages module, make sure data entered somewhere along way not snooped.

then encrypt information try using php's mcrypt short example of how encrypt , decrypt.

once information secured, should have no problem storing data in drupal's db structure. also, important note, might check out hook_init() instead of trying append in settings.php. in general bad practice.


Comments