Reputation: 815
Our application gets all the data from PHP/Mysql server in XML format
but now client don't want data to be appeared as it is, he fears, anyone who knows those .php file links can access all data on server and will become a competitor to him.
so i want to know is there any encryption available which i can use in php and decryption in ios.
or SSL is the only option?
EDIT: our php file returns XML data and client is bothered that competitors can get data, so i want to send encrypted data into XML and decrypt it in iPhone, so is there any good solution for that?
Thanks
Upvotes: 0
Views: 195
Reputation: 993
You can add some kind of authorization mechanism (something like oauth or a more basic one) so only authorized applications can get the XML data from server.
Upvotes: 0
Reputation: 6572
SSL is the most straightforward option, but you should probably also add a challenge/response so that every request is accompanied by a one time hash. This means that only devices that can create a valid 'key' can access the data, as opposed to anyone who can see the URL endpoint.
Upvotes: 1