RE: [wdvltalk] Securing web traffic

2008-01-15 Thread Matthew Macdonald-Wallace
PROTECTED] Sent: Monday, January 14, 2008 11:30 AM To: wdvltalk@lists.wdvl.com Subject: RE: [wdvltalk] Securing web traffic This is what I thought Cheryl, but the main thing I'm after really is pointers on how to do it. Is it just a case of programming my PHP + MySQL app as normal

RE: [wdvltalk] Securing web traffic

2008-01-15 Thread Ross Clutterbuck
Thanks for the replies so far. It seems we're all saying use SSL over HTTP to secure the connection for the entire session. Now, how do I actually go about doing this? MOU • The WDVL Discussion List from WDVL.COM • To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] or use

Re: [wdvltalk] Securing web traffic

2008-01-15 Thread David Precious
I agree whole-heartedly with Matt's response - nice one. However, one extra addition: Matthew Macdonald-Wallace wrote: 6) If you need to have the system run over more than one server, run the connections between the Apache/PHP (front-end) and the MySQL (backend) servers over an ssh tunnel or

RE: [wdvltalk] Securing web traffic

2008-01-14 Thread Cheryl D Wise
I don't know about the UK but in the US if there is any health information whatsoever your security measures must include SSL and encryption of the database. Cheryl D Wise MS MVP Expression - Author: Foundations of Microsoft Expression Web Win the full Expression Studio - see contest rules

RE: [wdvltalk] Securing web traffic

2008-01-14 Thread Ross Clutterbuck
This is what I thought Cheryl, but the main thing I'm after really is pointers on how to do it. Is it just a case of programming my PHP + MySQL app as normal but providing HTTPS addresses to my domain and having an SSL certificate? Is it more complex than that? MOU • The WDVL Discussion

RE: [wdvltalk] Securing web traffic

2008-01-14 Thread Cheryl D Wise
: Ross Clutterbuck [mailto:[EMAIL PROTECTED] Sent: Monday, January 14, 2008 11:30 AM To: wdvltalk@lists.wdvl.com Subject: RE: [wdvltalk] Securing web traffic This is what I thought Cheryl, but the main thing I'm after really is pointers on how to do it. Is it just a case of programming my PHP + MySQL