is password sent in clear text using mysql connect?

[jackvull]

is the password sent in clear text using mysql_connect?
If so, is there a more secure way of connecting to a remote mysql server that doesn't have ssh accessible?

[eelixduppy]

I am actually not sure about this. You can try to sniff it to see if anything shows up. I know there is a SSL option when you connect, ie:

mysql_connect('server:port', 'username', 'password', false, MYSQL_CLIENT_SSL);

[us.php.net...]

Take a look...

[Pico_Train]

Look into Chap and MD5 authentication, there are a few tutorials out there. If I remember correctly, the password itself never even ends up being sent through.

[jackvull]

I have no access to administer the remote mysql database apart from the actual data inside it. The host company don't permit this so there's no way it can recognise where the request from the client is coming from.
?

[Pico_Train]

Hi actually my comment was off a bit, I was referring to logins and not mysql_connect, sorry! Must be the meds...cough cough, sniffle sniffle...

[eelixduppy]

The login will be sent over in plain text. You should look into using the TLS/SSL protocols if you want protection from eavesdropping.

[jackvull]

again, the remote server is not administered by me. There is one protocol only and that is http over to mysql's standard port.
:(