Comments on: Database encryption made easy

By: Ar Condicionado

Ar Condicionado — Mon, 19 Mar 2012 14:45:10 +0000

Yea ! i Agree in ‘I even googled and found out that it must be stored in a blob and I still get NULL.’ Thanks for sharing!

By: Brandon

Brandon — Thu, 11 Jun 2009 17:38:49 +0000

@alex

You have a lot more potential problems if somebody has access to enable query logging. They could likely tcpdump the traffic as well, and likely have access to the encryption key as well….. Security is only as good as the weakest link.

By: alex

alex — Thu, 11 Jun 2009 15:46:58 +0000

not so great, actually. enable query logging in mysql and you can see all password used to encrypt data.

By: Brandon

Brandon — Tue, 02 Jan 2007 04:20:16 +0000

Yes, my database column is a blob. The MySQL documentation can be found here:
https://dev.mysql.com/doc/refman/4.1/en/encryption-functions.html

Exact debugging steps will depend on how you are calling the query. If using PEAR, I will often do a print_r($db) after the database call. There is a lot of stuff that it outputs, but it will contain the exact call it made to the database. Make sure variable substitutions happened correctly. If you want to send me some more specific info, I’d be happy to look at it for you.

Thanks,
Brandon

By: Shogo Yahagi

Shogo Yahagi — Tue, 02 Jan 2007 00:00:08 +0000

I get NULL when I use that. I even googled and found out that it must be stored in a blob and I still get NULL. Does this really work? I have the latest MySQL..

Are you using a blob?