Sorry, I meant to infer that you should use both SSL and Encryption.

-d

On Feb 1, 2010, at 2:53 PM, Paul Frazee wrote:

> This is over public networks. I did get the encryption to work, but
> I'm curious why you recommend not using SSL in this case?
> 
> On Feb 1, 1:09 pm, David Wang <dw...@udfi.biz> wrote:
>> i would recommend your first option which is going over ssl.
>> 
>> if this is all within the same network, then SSL will be enough to keep 
>> prying eyes out.
>> 
>> if its over public networks, then would probably suggest trying to figure 
>> out what is going wrong with the encrypt/decrypt function you are using 
>> (base64 suggestion below).
>> 
>> -d
>> 
>> ..oO  David Wang  Oo..
>> ..oO  blog  -http://www.udfi.biz
>> ..oO  JennieBot!  -http://www.jenniebot.com
>> 
>> On Feb 1, 2010, at 12:59 PM, pghoratiu wrote:
>> 
>>> If you have problems with data transmission I suggest you try out one
>>> of the following functions:
>>> http://php.net/manual/en/function.convert-uuencode.php
>>> http://www.php.net/manual/en/function.base64-encode.php
>>> to convert the binary string into something that can be safely
>>> transfered over the network.
>> 
>>> Best regards,
>> 
>>>    gabriel
>> 
>>> On Feb 1, 6:50 pm, Paul Frazee <pfra...@gmail.com> wrote:
>>>> Heyo. This is a repost from the forums; I'm in need of some sage
>>>> advice here. Read on:
>> 
>>>> The company keeps two databases - the master, which holds sensitive
>>>> data, and the slave, which replicates only the insensitive data. This
>>>> is actually pretty easy in MySQL, you should check it out.
>> 
>>>> Anywho, every so often, the website, which typically uses the public
>>>> slave database, needs to modify data on the private master database.
>>>> (AKA the user changes his profile or buys something.) No problem, I
>>>> just need to create a secure (and mostly one-way) webservice that
>>>> accepts the data from the website.
>> 
>>>> The trick is that I need to send this data from the controller, and I
>>>> need to encrypt the data. My first solution was to create a POST
>>>> request using the sfWebBrowser plugin, which then gets an XML
>>>> response. Yaba-daba-doo, that works.
>> 
>>>> Then I decide to encrypt. I mycrpt and send and... can't seem to get
>>>> the data or initialization vector to arrive. Why-oh-why? My best guess
>>>> is that encrypted data doesn't play nicely with POST validation. The
>>>> data is probably out of typical character range.
>> 
>>>> So at this juncture I decide to stop and ask, is my path righteous? Is
>>>> there an algorithm which will play nicely with POST, or should I use
>>>> cURL to create an SSL connection, or is a POST request completely off-
>>>> base?
>> 
>>>> Has anybody had similar experience?
>> 
>>>> Thanks
>> 
>>> --
>>> You received this message because you are subscribed to the Google Groups 
>>> "symfony users" group.
>>> To post to this group, send email to symfony-us...@googlegroups.com.
>>> To unsubscribe from this group, send email to 
>>> symfony-users+unsubscr...@googlegroups.com.
>>> For more options, visit this group 
>>> athttp://groups.google.com/group/symfony-users?hl=en.
> 
> -- 
> You received this message because you are subscribed to the Google Groups 
> "symfony users" group.
> To post to this group, send email to symfony-us...@googlegroups.com.
> To unsubscribe from this group, send email to 
> symfony-users+unsubscr...@googlegroups.com.
> For more options, visit this group at 
> http://groups.google.com/group/symfony-users?hl=en.
> 

..oO  David Wang  Oo..
..oO  blog  - http://www.udfi.biz 
..oO  JennieBot!  - http://www.jenniebot.com 

-- 
You received this message because you are subscribed to the Google Groups 
"symfony users" group.
To post to this group, send email to symfony-us...@googlegroups.com.
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en.

Reply via email to