安全的Webservice？(Secure Webservice?)

安全的Webservice？(Secure Webservice?)

我正在尝试使用PHP创建一个安全的Web服务（提供简单的数据库数据），可以通过我的Silverlight应用程序连接到它。 我不太了解PHP能够看到另一种方法来做到这一点。

Web服务只能通过客户端访问，并且只能使用正确的用户名/密码。

我能想到的唯一两种方式是通过URL传递用户名/密码哈希，或者使用“隐藏表单”并通过POST_来完成。

我只是想通过这一点，我是这个项目的唯一开发人员，我只是想通过这个PHP web服务部分，所以我可以回到成为一个应用程序员:)

通常情况下，我会学习PHP，但是我在上班，所以我只是想找到一个关于如何实现这一目标的正确方向！

I'm trying to create a secure webservice (that provides simple database data) with PHP that can be connected to through my Silverlight application. I don't know enough about PHP to be able to see another way to do this.

The webservice should only be accessible through the client, and only with the proper username/password.

The only two ways I can imagine to do this would be by passing the username/password hash via URL, or use a "hidden form" and do it via POST_.

I'm just trying to get past this point, I'm the sole developer on this project and I'm just trying to get past this PHP webservice part so I can get back to being an application programmer :)

Normally, I would learn PHP, but I'm on the clock, so I'm just looking for a point in the right direction on how to achieve this!

最满意答案

您将您的服务置于SSL之后，并以明文形式发送用户名密码。

你应该使用POST，因为url可能会在途中被缓存，显示你的凭据。

您可以使用json ， xml或查询字符串（简单表单post）来传递参数。

而已！

You put your service behind SSL, and send the username password in the clear.

You should use POST as the url may be cached along the way, showing your credentials.

You can use either json, xml or a query string (simple form post) to pass parameters.

That's it!