Do I use encrypt?
Greetings! Currently, my application writes data to a server using the put command: put someData into url (ftp://uName:pw...@123.45.6.78/folder/file.txt;) A client is requesting that I not use clear text for the username/password. To do this, do I use the encrypt command? If so, how is this done? There is no sample in the docs. Thank you in advance! -Dan ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution
Re: Do I use encrypt?
Hi Dan, I think you are out of luck when it comes to securing FTP. We've had several discussions on the list about this (and I believe there is an enhancement request to support sftp). The encrypt command is more for encrypting chunks of data rather than adding security to ftp transfers. Securing ftp requires the use of a server that provides a security layer and on Rev supporting that form of ftp security. Currently Rev does not support any kind of ftp security. Your best bet at the moment (if you must use ftp), is probably to use curl, and shell to that if it is available on your client platform (e.g. Linux or OS X, I think on Windows you might be able to package your own curl executable along with your Rev app). Bernard On Mon, Feb 23, 2009 at 6:42 PM, Dan Friedman d...@clearvisiontech.comwrote: Greetings! Currently, my application writes data to a server using the put command: put someData into url (ftp://uName:pw...@123.45.6.78/folder/file.txt;) A client is requesting that I not use clear text for the username/password. To do this, do I use the encrypt command? If so, how is this done? There is no sample in the docs. Thank you in advance! -Dan ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution
Re: Do I use encrypt?
Bernard, You said if you must use ftp... Is there another choice that provides a secure transfer that REV does support? -Dan Hi Dan, I think you are out of luck when it comes to securing FTP. We've had several discussions on the list about this (and I believe there is an enhancement request to support sftp). The encrypt command is more for encrypting chunks of data rather than adding security to ftp transfers. Securing ftp requires the use of a server that provides a security layer and on Rev supporting that form of ftp security. Currently Rev does not support any kind of ftp security. Your best bet at the moment (if you must use ftp), is probably to use curl, and shell to that if it is available on your client platform (e.g. Linux or OS X, I think on Windows you might be able to package your own curl executable along with your Rev app). Bernard On Mon, Feb 23, 2009 at 6:42 PM, Dan Friedman dan at clearvisiontech.comwrote: Greetings! Currently, my application writes data to a server using the put command: put someData into url (ftp://uName:pw...@123.45.6.78/folder/file.txt;) A client is requesting that I not use clear text for the username/password. To do this, do I use the encrypt command? If so, how is this done? There is no sample in the docs. Thank you in advance! -Dan ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution
RE: Do I use encrypt?
Hi Dan, Here is what you do: You create a CGI script in either Rev (if your server supports Rev CGI) or PHP on your server. The CGI script should accept params. Your Rev app address the CGI script with a post such as: Post some data and params to url http://123.45.6.78/cgi-bin/YourCGIScript.cgi (assuming this is where your cgi-bin and CGI script is located. The CGI script takes the data and knows the passwords to your server's encrypted areas but this is all handled on the sever side. As to the data itself, you can encrypt it and pass the encrypted data up to the sever and CGI script can decrypt and write to the server directory and files. In the same fashion, you can pass encrypted data (and files and stacks) down to your application without ever sending passwords or user names over the Internet or even any clear text data in either direction. The beauty about using this method to download information is that it will go directly to your application and never even get written to the local hard drives. If the information is in stacks, you can go to the stacks, which can be locked, in memory. So even a sniffer run locally doesn't help a hacker. :-) Have fun! Jim Bufalini -Original Message- From: use-revolution-boun...@lists.runrev.com [mailto:use-revolution- boun...@lists.runrev.com] On Behalf Of Dan Friedman Sent: Monday, February 23, 2009 8:42 AM To: RunRev Mail List Subject: Do I use encrypt? Greetings! Currently, my application writes data to a server using the put command: put someData into url (ftp://uName:pw...@123.45.6.78/folder/file.txt;) A client is requesting that I not use clear text for the username/password. To do this, do I use the encrypt command? If so, how is this done? There is no sample in the docs. Thank you in advance! -Dan ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution
Re: Do I use encrypt?
Dan, it depends on how much control you have over the server side of things. You could use https and post the data there. But that probably depends on having a server-side application or CGI script that can process the data and put it into a file. Another option might be to use scp shell. Again, depends on what client this is running on - on OS X and Linux scp is likely to be installed by default. On Windows it's again an issue having to bundle some similar software with your app. Bernard On Mon, Feb 23, 2009 at 7:59 PM, Dan Friedman d...@clearvisiontech.comwrote: Bernard, You said if you must use ftp... Is there another choice that provides a secure transfer that REV does support? -Dan Hi Dan, I think you are out of luck when it comes to securing FTP. We've had several discussions on the list about this (and I believe there is an enhancement request to support sftp). The encrypt command is more for encrypting chunks of data rather than adding security to ftp transfers. Securing ftp requires the use of a server that provides a security layer and on Rev supporting that form of ftp security. Currently Rev does not support any kind of ftp security. Your best bet at the moment (if you must use ftp), is probably to use curl, and shell to that if it is available on your client platform (e.g. Linux or OS X, I think on Windows you might be able to package your own curl executable along with your Rev app). Bernard On Mon, Feb 23, 2009 at 6:42 PM, Dan Friedman dan at clearvisiontech.comwrote: Greetings! Currently, my application writes data to a server using the put command: put someData into url ( ftp://uName:pw...@123.45.6.78/folder/file.txt;) A client is requesting that I not use clear text for the username/password. To do this, do I use the encrypt command? If so, how is this done? There is no sample in the docs. Thank you in advance! -Dan ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution ___ use-revolution mailing list use-revolution@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your subscription preferences: http://lists.runrev.com/mailman/listinfo/use-revolution
