Solved

Cross Site Scripting or Redirects?

Posted on 2012-03-20
3
265 Views
Last Modified: 2012-03-24
Here's my problem:

I have a site that contains sensitive Law Enforcement data.  A few state governments are stepping in and saying that since I am a private company, people cannot share the data they have with me.  We've been doing the same thing for over 10 years and now were running in to problems.  

One of my forms that collect the sensitive data is going to be owned by a government entity,  How can I pull data and insert data in to a sql db that is maintained on a seperate server than my website.  Is it SAFE to do so without compromising all the data?

Can you think of any other way that users can fill in these sensitive forms and it all be handled by the server of the government.  I have full access to both servers so that's not an issue, I'm just wondering what's the most secure and safeset way to send data and get data across two different sites?
0
Comment
Question by:deputycheek
  • 2
3 Comments
 
LVL 108

Accepted Solution

by:
Ray Paseur earned 500 total points
ID: 37744090
With something like this I would write a "web service" to request the data and a complementary web service to send the data.  Put them both behind HTTPS.  You can use a RESTful interface for this.  You can use md5() strings to verify that the messages are complete.
0
 
LVL 36

Expert Comment

by:Loganathan Natarajan
ID: 37745696
Yes, I support for RAY's comment.   We can store all the data into WEB SERVICES  and it can be processed securely with API's (SOAP / REST)
0
 
LVL 108

Expert Comment

by:Ray Paseur
ID: 37747249
Sidebar note...  "Cross Site Scripting" is a term of art that usually describes a security exposure.
https://www.owasp.org/index.php/Cross-site_Scripting_%28XSS%29
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Suggested Solutions

Having worked on larger scale sites, we found out that you are bound to look at more scalable solutions to integrating widgets, code snippets or complete applications and mesh them into functional sites, in any given composition. To share some of…
Does the idea of dealing with bits scare or confuse you? Does it seem like a waste of time in an age where we all have terabytes of storage? If so, you're missing out on one of the core tools in every professional programmer's toolbox. Learn how to …
Explain concepts important to validation of email addresses with regular expressions. Applies to most languages/tools that uses regular expressions. Consider email address RFCs: Look at HTML5 form input element (with type=email) regex pattern: T…
The viewer will learn how to look for a specific file type in a local or remote server directory using PHP.

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now