title: How do I keep a mySQL database secure?
body: <p>I'm going to be implementing a <code>PHP/mySQL</code> setup to store credit card information.</p>
  <p>It seems like <code>AES_ENCRYPT/AES_DECRYPT</code> is the way to go,</p>
  <p><strong>but I'm still confused on one point:</strong></p>
  <p><strong>How do I keep the encryption key secure?</strong></p>
  <p>Hardwiring it into my PHP scripts (which will live on the same server as the db) seems like a major security hole.</p>
  <p><strong>What's the &quot;best practice&quot; solution here?</strong></p>