[prev in list] [next in list] [prev in thread] [next in thread] 

List:       php-general
Subject:    Re: [PHP3] SSL Posts from PHP3
From:       Mark Musone <musone () afterfive ! com>
Date:       1998-05-29 16:55:55
[Download RAW message or body]

This isn't an SSL problem it's a common web programming problem.
How do you pass critical information through a web page without the
sender seeing it?

one solution is to pass a unique ID, and store all the real informaiton in a database
on the server.

There are about 5 threads about this already on this mailing list.

although it has nothing to do with PHP, maybe it should be added as a FAQ???

			Mark

> 
> > POSTing to httpS denotes posting using secure sockets. That means
> > only the sender and the recipient can "easily view the source".
> 
> Exactly.  But, I'm transmitting merchant id numbers and passwords that I
> don't want the sender to see!
> 
> Any other ideas?
> 
> ________________________
> Brett Error
> InterWeb Design and Hosting
> 366-WEBS (9327)
> 
> > -----Original Message-----
> > From: Roelof Osinga [mailto:roelof@eboa.com]
> > Sent: Friday, May 29, 1998 9:51 AM
> > To: Brett Error
> > Cc: Php3@Lists. Php. Net
> > Subject: Re: [PHP3] SSL Posts from PHP3
> >
> >
> > Brett Error wrote:
> > >
> > > Yes, that would indeed work, but as I explained in the original post, I
> > > can't do this because I am posting some confidential information.  If I
> > > simply write that information out has hidden fields in the form, someone
> > > could easily view the source and see it.
> > >
> > > Thanks anyway,
> > >
> > > > Looks like this:
> > > >
> > > > <form method=POST action="https://www.php.net/cgi-bin/program">
> >
> > POSTing to httpS denotes posting using secure sockets. That means
> > only the sender and the recipient can "easily view the source".
> >
> > Maybe you didn't notice the "s" in "https" ?
> >
> > Roelof

--
PHP 3 Mailing List   http://www.php.net/
To unsubscribe send an empty message to php3-unsubscribe@lists.php.net
To subscribe to the digest list:  php3-digest-subscribe@lists.php.net
For help: php3-help@lists.php.net  Archive: http://www.tryc.on.ca/php3.html

[prev in list] [next in list] [prev in thread] [next in thread]