php - Encrypt configuration from everybody including developer
I'm developing an app which require integration with finance institution, due to their lack of API I access them thru simple curl which need to specify the username and password of my finance institution in the configuration.
Now this configuration will be different during development and production environment. During production the client will specify their own username and password, but in case there is a problem we developer would sometime require to access the code, which is possible to see their username and password.
For security and integrity I prefer that the configuration is encrypted so we only see an encrypted value which is protected them from big hole. And when they want to change the value the need to input the password to decrypt, but then again I need to save the decrypt password in db or text which compromise their security again.
And second because the configuration is encrypted, during application usage the config must be decrypt so that the code can access the service, which is again I somehow need to save the decrypt password in db or text.
For above situation encryption doesn't seem to have the full solution. Is there a theory to implement this ( blocked text above ) ?
Currently our app is in LAMP environment.