Sending details from server to server!
Printed From: Web Wiz Forums
Category: General Discussion
Forum Name: Classic ASP Discussion
Forum Description: Discussion on Active Server Pages (Classic ASP).
URL: https://forums.webwiz.net/forum_posts.asp?TID=14554
Printed Date: 30 March 2026 at 9:38am Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com
Topic: Sending details from server to server!
Posted By: dj air
Subject: Sending details from server to server!
Date Posted: 04 April 2005 at 2:16pm
Hi guys im working on a Project soon to create a shopping cart system
and a feature will be send details to a Shared SSL.. so this will be a
different server.. as this is a purchaseable piece it will have Private
SSL also.
my question is what is the best way to send cart details from one
server to other.. safely eleminating hacking etc... or continiously
submitting to the other server..
i thopught about sending a veriable accross but its hard to do a random
gen veriable from one server to the other and validate it.
does anyone have any ideas?
|
Replies:
Posted By: Gullanian
Date Posted: 05 April 2005 at 5:27am
By only cart details do you mean products they have requested to purchase?
If so, then it doesn't really matter how you do it, just have an order
confirmation page on the SSL server to ensure their cart hasn't been
changed in the process.
|
Posted By: dj air
Date Posted: 05 April 2005 at 6:11am
hiya
the Shared server option will have all content sent via form unless
using the MSSQL Version, as it will be a serperate server ussually.
but this will be an option.
i had a thought on an idea what do you think on the below idea
i have Server 1 and Server 2
i have a Univeral Salt Code on both servers that match
when submitting from Server 1, i get the Univeral salt code and generate a random value. i then Hash encrypt it (forum style)
and pass the encrypted version along with the random value to Server 2
i then use Server 2 Salt code (same as server 1's one) and use the
random value sent via the form and Hash encrypt the server 2 Salt Code
with the form Random Value and if the output matchs the form Encrypted
Version it was sent From Server 1
the Univeral salt Code for the application will be randomly set on
install using FSO to change a value within the ConFig files that hold
details that can't be in the Database.
the idea sort of uses Session veriable idea. as each Submission will be
different. and as its encrypted oin submitting it should help the
hacking
|
Posted By: Gullanian
Date Posted: 05 April 2005 at 8:31am
|
If it's being submitted by form to server 2, can't you just check the
HTTP referer to make sure the request originated from server 1?
|
Posted By: dj air
Date Posted: 05 April 2005 at 9:10am
good point .. didn't think of that one. 
cheers. im not actually working on it for a month or so as i have a Domain CP to make .. then im working on it.
cheers for that.
|
Posted By: Mart
Date Posted: 05 April 2005 at 9:54am
|
If you are using MSSQL why would you need to send data to your second
server like that? If you store the shopping cart in the database both
of your servers should be able to connect to the MSSQL server and get
the shopping cart.
|
Posted By: dj air
Date Posted: 05 April 2005 at 10:08am
i know that MSSQL you can..
but the cart is going to be Access also. and some people might not want
to use te MSSQL as it maybe slower than wanted so i'm making it so you
can use MSSQL or use the access version side thats a form
|
Posted By: snooper
Date Posted: 05 April 2005 at 8:16pm
|
what about a background http POST?
|
|