[Rd] Masked user input

From: miller_2555 <nabble.30.miller_2555_at_spamgourmet.com>
Date: Fri, 12 Jun 2009 15:08:40 -0700 (PDT)

Hi -

   I'm creating a package of database tools. A function in the package requires the username and password as input to the function in order to initially connect to the target database(s). Of course, this poses a significant security issue given the possible retention of the function statement in cleartext. I did not readily encounter a package meant to mask input from the user nor do I know of any method to prevent sensitive information from appearing on-screen or from logging in the command history of a running R session. While using the --vanilla option when starting R helps with permanent logging of sensitive information, it is not always preferable to run R with special flags. Is any solution available to prevent the logging/ display of user input. Obviously, hard-coding the sensitive information is not an option.

Note: I currently use the following (summarized) convention:

myloginfunction <- function(uname = readline("Enter username") , passwd = readline("Enter password")) { print(c(uname,passwd)); };

However, the readline function prints the response on-screen.


View this message in context: http://www.nabble.com/Masked-user-input-tp24005544p24005544.html
Sent from the R devel mailing list archive at Nabble.com.

R-devel_at_r-project.org mailing list
Received on Sat 13 Jun 2009 - 12:33:17 GMT

Archive maintained by Robert King, hosted by the discipline of statistics at the University of Newcastle, Australia.
Archive generated by hypermail 2.2.0, at Sat 13 Jun 2009 - 20:37:50 GMT.

Mailing list information is available at https://stat.ethz.ch/mailman/listinfo/r-devel. Please read the posting guide before posting to the list.

list of date sections of archive