开发者

secure curl POST

开发者 https://www.devze.com 2023-03-28 19:01 出处:网络
in my new script i am using two servers .. one for database and php files and one for files uploaded by users , like exe , mp3 , etc ..

in my new script i am using two servers ..

one for database and php files

and one for files uploaded by users , like exe , mp3 , etc ..

from control panel on the first server , they can delete them files on the second server ..

my question is :

i am using curl to do this job

i am sending 2 POST information by curl

1 - some password for my site 2 - the job what i want do ! , like , delete file , make new folder ...

examples for the curl function :
$post = array('password'=>'Mywebsite开发者_JS百科password','command'=>'make new folder');

example for the file on the second server

if($_POST['password'] and $_POST['password'] == Mywebsitepassword){
  it's ok
}

Now the password is 'Mywebsitepassword'

can any one know it ?????

if some one can know it , he will be able to delete all my second server content !!

is any addone or some way to know it ??

may be some addone for firefox can know it or something like that

and what is the best way to secure this job ?

thank you ..


Just make sure you do your stuff over a secure connection (SSL).

EDIT

Tutorial of creating self signed certificate on Linux: http://www.akadia.com/services/ssh_test_certificate.html

on Windows: http://technet.microsoft.com/en-us/library/cc753127(WS.10).aspx

0

精彩评论

暂无评论...
验证码 换一张
取 消