Improve company productivity with a Business Account.Sign Up

x
?
Solved

Cross Site Scripting or Redirects?

Posted on 2012-03-20
3
Medium Priority
?
286 Views
Last Modified: 2012-03-24
Here's my problem:

I have a site that contains sensitive Law Enforcement data.  A few state governments are stepping in and saying that since I am a private company, people cannot share the data they have with me.  We've been doing the same thing for over 10 years and now were running in to problems.  

One of my forms that collect the sensitive data is going to be owned by a government entity,  How can I pull data and insert data in to a sql db that is maintained on a seperate server than my website.  Is it SAFE to do so without compromising all the data?

Can you think of any other way that users can fill in these sensitive forms and it all be handled by the server of the government.  I have full access to both servers so that's not an issue, I'm just wondering what's the most secure and safeset way to send data and get data across two different sites?
0
Comment
Question by:deputycheek
  • 2
3 Comments
 
LVL 111

Accepted Solution

by:
Ray Paseur earned 1500 total points
ID: 37744090
With something like this I would write a "web service" to request the data and a complementary web service to send the data.  Put them both behind HTTPS.  You can use a RESTful interface for this.  You can use md5() strings to verify that the messages are complete.
0
 
LVL 36

Expert Comment

by:Loganathan Natarajan
ID: 37745696
Yes, I support for RAY's comment.   We can store all the data into WEB SERVICES  and it can be processed securely with API's (SOAP / REST)
0
 
LVL 111

Expert Comment

by:Ray Paseur
ID: 37747249
Sidebar note...  "Cross Site Scripting" is a term of art that usually describes a security exposure.
https://www.owasp.org/index.php/Cross-site_Scripting_%28XSS%29
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Containers like Docker and Rocket are getting more popular every day. In my conversations with customers, they consistently ask what containers are and how they can use them in their environment. If you’re as curious as most people, read on. . .
This holiday season, we’re giving away the gift of knowledge—tech knowledge, that is. Keep reading to see what hacks, tips, and trends we have wrapped and waiting for you under the tree.
The viewer will learn how to look for a specific file type in a local or remote server directory using PHP.
In this video, Percona Solutions Engineer Barrett Chambers discusses some of the basic syntax differences between MySQL and MongoDB. To learn more check out our webinar on MongoDB administration for MySQL DBA: https://www.percona.com/resources/we…

606 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question