Tag Archives: ws-security

Article Introducing PHP Data Services

Posted on January 5, 2009 by dimuthu

Now you can view the article I wrote titling “Introduction to PHP Data Services“. There I explain how you can design and implement Data Services in PHP using WSF/PHP Data Services Library. This article covers, Designing your Data Service API. … Continue reading →

Posted in database, DataServices, design, php, REST, RESTful, SOA, SQL, Tutorial/Guide, web services, WSDL, wsf/php, wso2, xml | Tagged , , , , , , , , , , , | Leave a comment

WS-SecurityPolicy With PHP

Posted on November 19, 2008 by dimuthu

WS-SecurityPolicy specification defines standards for defining security policies for your web service. WSF/PHP allows you to declare your security policies according to these standards. You can take one of following approaches to associate policies to your web service or client. … Continue reading →

Posted in DataServices, php, REST, security, Tutorial/Guide, web services, WSDL, wsf/php, wso2, xml, xml schema | Tagged , , , , , , | 14 Comments

Signing SOAP Headers In PHP Web Services

Posted on November 18, 2008 by dimuthu

Non-Repudiation and Integrity are two main security issues addressed by signing a message. If you are writing a web service or a service consumer in PHP you can use the WSF/PHP toolkit to sign messages. Here is how you can … Continue reading →

Posted in php, security, Tutorial/Guide, wsf/php, wso2 | Tagged , , , , , , , | Leave a comment

Detect Replay Attacks In to Your PHP Web Service

Posted on November 17, 2008 by dimuthu

Replay attack is a common kind of attack, the hackers are using to break the security of a web service. If you can intercept one soap message while it is transferring through the wire, you can replay that message to … Continue reading →

Posted in php, security, Tutorial/Guide, web services, wsf/php, wso2 | Tagged , , , , , , | 2 Comments

PHP Data Services With WS-Security

Posted on September 16, 2008 by dimuthu

Earlier I wrote a blog about how to make your wordpress blog a web service using the WSF/PHP Data Services library. I will expand that post to demonstrate the use of WS-Security features with WSF/PHP. This time it is a … Continue reading →

Posted in DataServices, security, Tutorial/Guide, web services, WSDL, wsf/php, wso2 | Tagged , , , , , , | 5 Comments

Web Services Security in WSF/PHP 1.3.2

Posted on August 18, 2008 by dimuthu

With WSF/PHP 1.3.2 you can use following basic features in WS-Security. Feature Purpose Array based Security Policy Options ($sec_policies) Security Token Options ($sec_token_options) UsernameToken Authentication array(“useUsernameToken” => TRUE) array(“user” => “your_username”, “password” => “your_password”, “passwordType” => “Digest”); //Digest/Plain Timestamp Avoid … Continue reading →

Posted in security, Tutorial/Guide, web services, wsf/php, wso2 | Tagged , , , , , , , , , , | 2 Comments