Re: Executing PHP files on remote web server

rdyornot wrote:
"Jerry Stuckle" <jstucklex@xxxxxxxxxxxxx> wrote in message news:gvturi$bbk$1@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
rdyornot wrote:
The good news is we can access the web MySQL database directly from our domain's web space. Is it possible to move a few of the PHP pages -- the ones needed to do the inserts into the MySQL database -- to the web host and point to those remote files in the PHP pages that remain on our own web server? (From what I can see this needs to include a global variables file besides the SQL insert scripts. The global variables include SSI file paths, db name, user name, etc. that don't match on the two web servers.) The result would be the PHP pages on the web host's server executing the data insert statements into the web database. I think I need to pass session variable values to the web host's server from the session variables on our web server, but I'm a C and Java programmer from way back, not a PHP programmer (until now!) and I don't know if these remote operations can be done.
You should have the same security concern for your own MySQL database. You say you don't want your customers accessing your network to get the data - why are you leaving your MySQL database open for anyone to access? That is MUCH MORE of a security concern! What's going to happen when someone hacks it?

Thanks for the warning, but our MySQL database isn't accessible from the Internet. We've set up firewalls. It's only accessible from authenticated users with IP addresses on our network, including our web server. The web server is also firewalled and only accessible from authenticated users with IP addresses on our network. If a hacker breaks through the firewalls, then we're in trouble.

The first thing you need to do is to hire a programmer to figure out what you've got and then how to do it the right way.

There's no budget to hire another employee, even temporarily. We only have two employees left who have any IT experience. I'm the Oracle and SQL Server DBA, database developer, desktop app developer and part-time network administrator/help desk operator -- and now I'm the MySQL DBA and web developer, too.

Thanks for the advice.



How much is your time worth? How much is the company losing because you have to spend your time trying to learn PHP?

Not to mention what happens if your database gets screwed up (or exposed) because you're not familiar with things like SQL injection and other security items associated with having something on the internet?

Can you afford NOT to hire a contractor to do it right?

I'm asking this not because I'm interested - I have too much on my plate right now. But for your own sake, if your data is at all important, get someone who knows what he's doing.


--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@xxxxxxxxxxxxx
==================
.

Relevant Pages

  • Re: Executing PHP files on remote web server
    ... We have a commercial web host servicing our external clients, but we don't want to move the entire app and database to the web host because a lot of the data is sensitive. ... By loading the non-sensitive data into the web host's MySQL tables, our external clients can see their reports on the web. ... our web host put a firewall on the MySQL database so we can't insert data into the remote tables directly from the PHP pages running on our own web server. ...
    (comp.lang.php)
  • Re: Executing PHP files on remote web server
    ... We have a commercial web host servicing our external clients, but we don't want to move the entire app and database to the web host because a lot of the data is sensitive. ... our web host put a firewall on the MySQL database so we can't insert data into the remote tables directly from the PHP pages running on our own web server. ...
    (comp.lang.php)
  • Re: Executing PHP files on remote web server
    ... Is it possible to move a few of the PHP pages -- the ... from the session variables on our web server, but I'm a C and Java ... You should have the same security concern for your own MySQL database. ... users with IP addresses on our network, ...
    (comp.lang.php)
  • Re: Newbie dumb question
    ... > Can I use PHP without using a Web Server to drive a MySQL application? ... > but it seems to be always tied up to a web page served by a Web Server, ... not as a general-purpose programming language. ...
    (comp.lang.php)
  • Re: PC requirements for this configuration.
    ... It would be a web server having 3000 hits a day, ... doing some PHP and MySQL scripts. ...
    (comp.unix.bsd.freebsd.misc)