Re: B2B site

I am in no way an expert about security, but I think it is true to say that secure/encrypted connections like SSL can give a false sense of security because they probably do little to protect data sitting on a badly configured server. They should be treated as only one part of a comprehensive security approach ... so yes, there probably are great deal more security concerns that you should be thinking about. Like your forms for example ... will you be validating input adequately? Michael Hall ----- Original Message ----- From: Abe Asghar <abe@fish.tm> To: <php-general@lists.php.net> Sent: Friday, September 29, 2000 7:26 PM Subject: [PHP] B2B Site > Hi Guys, > > It looks pretty likely that I will be working on a site with a catalogue > that allows suppliers and buyers to log in and add products. > > The site must be secure in how it handles people logging in. If the site is > put over a secure connection then does that mean that it is secure as this > encrytps data between the server and the browser. Then when the users want > to download orders they can log in and download them over a secure > connection. > > I will not be sending them the order by email as this is not secure. Does > this sound genereally secure enough? > > Or are there a great deal more security concerns that I should be thinking > about. > > Thanks, > > Abe > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net > _____________________________________ M U L G A W E B S E R V I C E S Open Source Web Solutions mulgaweb@mulga.com.au * www.mulga.com.au Ph/Fax (08) 8953 1442 * Alice Springs, NT _____________________________________