scatee7
asked on
XML embedded Email Message
I have someone asking for a way to send someone an email that contains some type of form, or GUI interface where a person receiving the email could enter in some basic pieces of information and when done submit that information directly into a database located somewhere else on the internet. They are wanting this done via XML.
Have any of you ever heard of/thought of how this could be done. I'm not sure how an xml message could be embedded or attached to an email, allowing the reader to enter data and submit it to a database.
If you have any ideas how this would work could you point me in the right direction?
Have any of you ever heard of/thought of how this could be done. I'm not sure how an xml message could be embedded or attached to an email, allowing the reader to enter data and submit it to a database.
If you have any ideas how this would work could you point me in the right direction?
ASKER
That is my thought but:
How could you pass the credentials for the database connection without the entire internet being able to see?
How could you pass the credentials for the database connection without the entire internet being able to see?
For the form, you mean? You don't do any authentication in the form, you do that in the form processor it posts to. And the DB connection ifno itself you should keep in an include file in non-public space anyway.
ASKER
Would that authentication be passed in clear text or is there a way to encrypt the authentication? I do not want someone to be able to see the user and pass to access the db.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
that makes much more sense.
I appreciate the insight.
Scatee7
I appreciate the insight.
Scatee7
> You should not be passing the authentication user/pass for your database to any machine... Rather, setup an include file on the server that has the database connection functions & user/pass in it.
Isn't that what I said?
Isn't that what I said?
Seems to me there's no reason not just to use a plain old HTML form for something like this.