I am doing a PHP website for a client who deals with third party financial information, and he is concerned about the developmers (me) having access to all the information, which is obviously a valid concern.
I am currently hosting on a shared hosting environment, however, I am going to recommend a dedicated server for this site.
I can build in all kinds of logging in the source code of the site, and have the code audited before the site launches, so that should prevent back-doors in the code to leak information. I am, however, concerned on how to prevent access to phpMyadmin or other administrative tools to access the database directly.
Where would I start in getting this concern out of the way? Any advice will be appreciated.
Thanks in advance!