Category Archives: security

SOA Way of Writing PHP

Posted on September 20, 2008 by dimuthu

Traditional way of Writing PHP Let me draw a component diagram of a typical traditional(conventional) PHP web application. With this design you get the advantages of the client-server architecture and the MVC design pattern. Advantages of the Traditional Approach You … Continue reading →

Posted in DataServices, security, Tutorial/Guide, web services, wsf/php, wso2 | Tagged , , , , , , , | 7 Comments

PHP Data Services With WS-Security

Posted on September 16, 2008 by dimuthu

Earlier I wrote a blog about how to make your wordpress blog a web service using the WSF/PHP Data Services library. I will expand that post to demonstrate the use of WS-Security features with WSF/PHP. This time it is a … Continue reading →

Posted in DataServices, security, Tutorial/Guide, web services, WSDL, wsf/php, wso2 | Tagged , , , , , , | 5 Comments

Web Services Security in WSF/PHP 1.3.2

Posted on August 18, 2008 by dimuthu

With WSF/PHP 1.3.2 you can use following basic features in WS-Security. Feature Purpose Array based Security Policy Options ($sec_policies) Security Token Options ($sec_token_options) UsernameToken Authentication array(“useUsernameToken” => TRUE) array(“user” => “your_username”, “password” => “your_password”, “passwordType” => “Digest”); //Digest/Plain Timestamp Avoid … Continue reading →

Posted in security, Tutorial/Guide, web services, wsf/php, wso2 | Tagged , , , , , , , , , , | 2 Comments

Encrypt and Sign your SOAP messages in PHP

Posted on August 14, 2008 by dimuthu

When you are developing a Web Service, you have to think about the security aspects of your service seriously. When it comes to security in web services you have two basic choices. Transport level security – Just SOAP over HTTPS … Continue reading →

Posted in security, web services | Tagged , , , , , , , , , , | 3 Comments

Transport Level Security vs Message Level Security

Posted on August 14, 2008 by dimuthu

Transport Level Security Message Level Security Secures point to point communication. E.g: Your browser to Apache server Secures end to end to end communication. E.g. Sales Order Request application to Database updating application Not transparent thorough multiple transport protocols, Transparent … Continue reading →

Posted in security, web services | Tagged , | 1 Comment