Encrypting Configuration File

[dtwyman]

Hi,

 

I’m considering purchasing WHMCS and have a security question.

 

In a nutshell, what I am thinking of doing is to increase security with the end goal being such that even if someone were to gain root access to the server, they could still not get access to the customer data.

 

So, what I’ve come up with is as follows:

 

After running the installation wizard, encrypt the configuration file with one of the various encryption products out there. I’m thinking of going with PHPCipher since it’s cheap. Has anybody had any experience doing this? If so, any problems?

 

With respect to the database, and I realize the sensitive data in the database is already encrypted but I’m trying to add an additional layer of security, I’m thinking of going with either Vormetric Database Encryption Expert (http://www.vormetric.com) or Gazzang (http://www.gazzang.com). Does anyone have any experience using either of these products with WHMCS? If so, any problems?

 

Are there any other ways to achieve what I am trying to achieve?

 

Thanks.