Re: VFP 9: Help with sending/receiving XML via FTP by Thomas
Thomas
Fri Aug 25 02:30:58 CDT 2006
John Dandy schrieb:
> It seems web service would be overkill for what I'm attempting to do.
Thought so - but sometimes tackling a problem with a slightly
"overcharged" solution teaches a bit - you are certain you are fit for
other probs afterwards.
>
> Each user on the system would have their own unique FTP login and directory.
> The VFP application connects to the FTP server and directory for the user.
> Once connected, XML files are exchanged.
ANY server is a slight risk - it depends on the calibre of the admin and
the OS used.
>
> One potential problem would be a user logging onto the server with FTP
> client. Once connected with his login and password, he could navigate other
> user directories and might even cause some damage.
IMHO security aspects are better controlled by email approach.
Especially if you have to give access to more than a handful of people -
remember the risk is 1 - (1-risk1User)**Nuser. The result often
surprizes when calculated.
>
> The information is not so sensitive that data encryption would be necessary.
Hint from someone in the same industry in germany - think about it, play
around with it, if you happen to read about it, get your brain into
"working mode" to remember better. Be prepared to answer the coming
questions - I have seen too many setups where security was slapped on in
a hurry. I think no security would be better than some of the easy
breakable things, as it gives a false sense of security.
>
> Based on the security built the VFP application and how it connects to the
> FTP server and the risks of someone connecting with FTP client, would you
> still recommend email?
Yupp. Technology in itself is so used that "administration" can be
handled by almost anybody - less need for admin knowledge. Security
level much higher, much of the intended fuctionality (ACK, protocol)
already built in. The metaphor is probably closer.
Enough pre-built code on the vfp side availabe. A well rounded (although
perhaps a bit dated) overview of possible technologies is in megafox by
Akins,Kramek &Schummer, where you find also some base classes solid
enough to grow upon. Recommended, if you don't have a familiar starting
point already: you save many H checking out the different routines
available and have more surrounding commentary than any possible
routine. And the technology hasn't changed that much - it is often sold
only under a different name <g>.
We have Webservices and email integrated, and the email parts are always
easier to handle <g>. For instance we use different email recient
adresses for different marketing campaigns and each agent sends back his
answer on participation, number of leads asked for and so on. We
identify the agent by parsing the automatically created email text -
so there is no need to create a couply of thousend return adresses.
YMMV here, but the originating adress helps a lot if anything goes
wrong. You still can search along the entire mail slot tree...
my 0.04 (I've done it <g>) EUR
thomas