Justtechjobs.com Find a programming school near you






Online Campus Both


php-general | 2001092

[PHP] Re: [PHP-DB] Cross site authentication From: Bill Lubanovic (bill <email protected>)
Date: 09/19/01

Rick Gardner wrote:
>
> Would a solution like xml-rpc work?
>
> On Wednesday, September 19, 2001, at 09:43 AM, Bill Lubanovic wrote:
>
> >
> > Customers are authenticating through an IIS server against a database on
> > Win2K. How do I securely pass this information to a separate
> > PHP/apache/UNIX system? Since any parameters could be forged, it seems
> > I'd need a cryptographic approach. Does anyone have experience with a
> > cross-platform solution (ASP/IIS/Win2K and PHP/apache/Linux)?
> >...

XML-RPC or SOAP structure the data better than GET or POST, but they
don't address the security issues. We can't send names, passwords, or
ids, no matter how we wrap them. How can platform A tell platform B
that it's authenticated someone? How can B trust A? 

-- 
Bill Lubanovic
Mad Scheme Limited

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: php-general-unsubscribe <email protected>
For additional commands, e-mail: php-general-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>