Encrypting Session Data

Please support our JavaScript / DHTML / AJAX advertiser: PostgreSQL or MySQL? Compare and contrast the two most popular open source databases
Reply

Join Date: Apr 2004
Posts: 759
Reputation: Killer_Typo will become famous soon enough Killer_Typo will become famous soon enough 
Solved Threads: 35
Killer_Typo's Avatar
Killer_Typo Killer_Typo is offline Offline
Master Poster

Encrypting Session Data

 
0
  #1
Sep 22nd, 2006
I recently read a post by someone stating that you could not encrypt POST or GET sessions while sending data between pages.

I wanted to know if there was a way.

could one not simply write a script that would encrypt the message before sending along with a key that on the following page was decrypted using the required key?

or something to that effect.

Just wondering what everyones opinions are one this subject and what the standard is for sending data accross pages to ensure security.



i personally was thinking along the lines of writing a bit of javascript to encrypt messages using a custom written encryption algorythim along with a generated key that is generated based on how the string was encrypted, and the recieving page would be a PHP script that would grab the key and based off of what the key said would decrypt the strings and what was needed with them.

anyone else got any ideas?? that are maybe simpler?
Dont forget to spread the reputation to those that deserve!
Reply With Quote Quick reply to this message  
Join Date: Dec 2004
Posts: 1,655
Reputation: tgreer is an unknown quantity at this point 
Solved Threads: 35
Team Colleague
tgreer tgreer is offline Offline
Made Her Cry

Re: Encrypting Session Data

 
0
  #2
Sep 22nd, 2006
What precisely do you mean by "data between pages"? POST and GET describe communication between a web page (client) and a web server application. Of course POST and GET can be encrypted. That's what certificates and the HTTPS protocol are all about.
Reply With Quote Quick reply to this message  
Join Date: Apr 2004
Posts: 759
Reputation: Killer_Typo will become famous soon enough Killer_Typo will become famous soon enough 
Solved Threads: 35
Killer_Typo's Avatar
Killer_Typo Killer_Typo is offline Offline
Master Poster

Re: Encrypting Session Data

 
0
  #3
Sep 22nd, 2006
just in response to a comment that was made about someone stating that you could not encrypt post and get.


and by data i was referring to the information being passed by the post and get methods.
Dont forget to spread the reputation to those that deserve!
Reply With Quote Quick reply to this message  
Join Date: Dec 2004
Posts: 1,655
Reputation: tgreer is an unknown quantity at this point 
Solved Threads: 35
Team Colleague
tgreer tgreer is offline Offline
Made Her Cry

Re: Encrypting Session Data

 
0
  #4
Sep 22nd, 2006
You most definitely CAN encrypt that data. Do a web search for "HTTPS Protocol".
Reply With Quote Quick reply to this message  
Reply

This thread is more than three months old.
Perhaps start a new thread instead?
Message:


Thread Tools Search this Thread



About Us | Contact Us | Advertise | DaniWeb | Acceptable Use Policy | RSS Feed

©2003 - 2009 DaniWeb® LLC