-
Book Overview & Buying
-
Table Of Contents
PHP Oracle Web Development: Data processing, Security, Caching, XML, Web Services, and Ajax
By :
One issue with the PO web service discussed in the preceding sections is that no authentication is required when consuming this service. What this means is that everyone may submit a PO document to the service, without having to provide any credentials. However, in a real-world situation you might want only legitimate users to be able to consume the service.
One simple way to achieve this could be to provide legitimate users with a token, which they will then supply with a request message when consuming the service. A significant disadvantage of this approach is that an unauthorized user may obtain the token and then consume the service on behalf of a legitimate user.
To work around this issue, you might use, in place of a fixed token, a hash generated from the value of a particular element or elements in the PO document being passed to the service. On the client, you might include that hash as a part in the SOAP message body containing the PO document in the other part. The...
Change the font size
Change margin width
Change background colour