Solved

Cross Site Scripting or Redirects?

Posted on 2012-03-20
3
266 Views
Last Modified: 2012-03-24
Here's my problem:

I have a site that contains sensitive Law Enforcement data.  A few state governments are stepping in and saying that since I am a private company, people cannot share the data they have with me.  We've been doing the same thing for over 10 years and now were running in to problems.  

One of my forms that collect the sensitive data is going to be owned by a government entity,  How can I pull data and insert data in to a sql db that is maintained on a seperate server than my website.  Is it SAFE to do so without compromising all the data?

Can you think of any other way that users can fill in these sensitive forms and it all be handled by the server of the government.  I have full access to both servers so that's not an issue, I'm just wondering what's the most secure and safeset way to send data and get data across two different sites?
0
Comment
Question by:deputycheek
  • 2
3 Comments
 
LVL 108

Accepted Solution

by:
Ray Paseur earned 500 total points
ID: 37744090
With something like this I would write a "web service" to request the data and a complementary web service to send the data.  Put them both behind HTTPS.  You can use a RESTful interface for this.  You can use md5() strings to verify that the messages are complete.
0
 
LVL 36

Expert Comment

by:Loganathan Natarajan
ID: 37745696
Yes, I support for RAY's comment.   We can store all the data into WEB SERVICES  and it can be processed securely with API's (SOAP / REST)
0
 
LVL 108

Expert Comment

by:Ray Paseur
ID: 37747249
Sidebar note...  "Cross Site Scripting" is a term of art that usually describes a security exposure.
https://www.owasp.org/index.php/Cross-site_Scripting_%28XSS%29
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Having worked on larger scale sites, we found out that you are bound to look at more scalable solutions to integrating widgets, code snippets or complete applications and mesh them into functional sites, in any given composition. To share some of…
Part of the Global Positioning System A geocode (https://developers.google.com/maps/documentation/geocoding/) is the major subset of a GPS coordinate (http://en.wikipedia.org/wiki/Global_Positioning_System), the other parts being the altitude and t…
Learn how to match and substitute tagged data using PHP regular expressions. Demonstrated on Windows 7, but also applies to other operating systems. Demonstrated technique applies to PHP (all versions) and Firefox, but very similar techniques will w…
The viewer will learn how to dynamically set the form action using jQuery.

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now