[nycphp-talk] Secure (XML-RPC) connection
Faber Fedor
faber at linuxnj.com
Wed Mar 24 09:24:48 EST 2004
I need some extra brains for a design I'm doing. Since it's going to
involve XML-RPC and PHP, I figured I'd ask here.
I'm putting together a basic shopping cart. I can't use existing
solutions because the back end database is called jBASE (a variant of
PICK). jBASE lives on the Production Server behind a LinkSys
firewall/router. The web site sits on the Web Server and is outside of
the firewall. The plan so far is: user submits a request (places an
order, wants to see Product ID# 1234, etc.) to the Web Server. The Web
Server does some PHP magic and sends the request to the Production
Server via XML-RPC. The Production Server does some (PHP?) magic and hands
the request to the database via CGI calls. When the Production Server
responds, the process is reversed.
I don't know how to do the XML-RPC magic above, but tht's part of the
fun of the project. What I Can't figure out is how to securely transfer
the data between the two servers. I need a secure connection from the
Web Server, through the firewall to the Production Server that can't be
cracked by script kiddies and the like. I tried setting up a VPN tunnel
using FreeS/WAN And Openswan and I can't get them working after a week,
so it's time to try something else.
The client insists that this be done in real-time, so I can't have a
copy of the database on the web server.
Any ideas?
--
Regards,
Faber
Linux New Jersey: Open Source Solutions for New Jersey
http://www.linuxnj.com
More information about the talk
mailing list