RE: [wdvltalk] Securing web traffic

2008-01-15 Thread Matthew Macdonald-Wallace
PROTECTED] Sent: Monday, January 14, 2008 11:30 AM To: wdvltalk@lists.wdvl.com Subject: RE: [wdvltalk] Securing web traffic This is what I thought Cheryl, but the main thing I'm after really is pointers on how to do it. Is it just a case of programming my PHP + MySQL app as normal

RE: [wdvltalk] Securing web traffic

2008-01-15 Thread Ross Clutterbuck
Thanks for the replies so far. It seems we're all saying use SSL over HTTP to secure the connection for the entire session. Now, how do I actually go about doing this? MOU • The WDVL Discussion List from WDVL.COM • To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] or use

Re: [wdvltalk] Securing web traffic

2008-01-15 Thread David Precious
I agree whole-heartedly with Matt's response - nice one. However, one extra addition: Matthew Macdonald-Wallace wrote: 6) If you need to have the system run over more than one server, run the connections between the Apache/PHP (front-end) and the MySQL (backend) servers over an ssh tunnel or

[wdvltalk] Securing web traffic

2008-01-14 Thread Ross Clutterbuck
Hi list There's always something new to learn and this is the first time I've really needed to secure a web session in a client project, and I'm after a few pointers if I may... Fundamentally, the project is an online questionnaire which stores responses in a back-end database. That database can

RE: [wdvltalk] Securing web traffic

2008-01-14 Thread Cheryl D Wise
I don't know about the UK but in the US if there is any health information whatsoever your security measures must include SSL and encryption of the database. Cheryl D Wise MS MVP Expression - Author: Foundations of Microsoft Expression Web Win the full Expression Studio - see contest rules

RE: [wdvltalk] Securing web traffic

2008-01-14 Thread Ross Clutterbuck
This is what I thought Cheryl, but the main thing I'm after really is pointers on how to do it. Is it just a case of programming my PHP + MySQL app as normal but providing HTTPS addresses to my domain and having an SSL certificate? Is it more complex than that? MOU • The WDVL Discussion

RE: [wdvltalk] Securing web traffic

2008-01-14 Thread Cheryl D Wise
: Ross Clutterbuck [mailto:[EMAIL PROTECTED] Sent: Monday, January 14, 2008 11:30 AM To: wdvltalk@lists.wdvl.com Subject: RE: [wdvltalk] Securing web traffic This is what I thought Cheryl, but the main thing I'm after really is pointers on how to do it. Is it just a case of programming my PHP + MySQL