Web Security Filter

[Garry Claridge]

I have just developed a method (still testing) for restricting "-raw", "-fmp_xml" and "-dbnames".

This is used in conjunction with an Apache server. The "Filter" is a php script, I've named it "fmpro.php":

<?php

if ($_SERVER["QUERY_STRING"] != "")

{

if ((strstr($_SERVER["QUERY_STRING"], '-raw')) || (strstr($_SERVER["QUERY_STRING"], '-fmp_xml')) || (strstr($_SERVER["QUERY_STRING"], '-dbnames')))

{

echo "This request is not allowed.";

}

else

{

include("http://10.0.1.107:1154/FMPro?" . $_SERVER["QUERY_STRING"]);

};

}

else

{

echo "POST method is not yet implemented";

};

?>

To get to the php script, "fmpro.php", through a usual CDML URL you can use the Apache "Redirect" directive in the httpd.conf file. Here is the one I am using:

Redirect /FMPro http://www.webdbonline.com/fmpro.php

Hence, I can use URLs like this:

http://www.webdbonline.com/FMPro?-db=combotest.fp5&-format=hworld.html&-findall

The URL will firstly go to a Linux server (an old HP e-vectra) which "Redirects" the request to the "fmpro.php" script. The script uses the argument string to create the real query which is to FM on my PowerBook on the office network.

Hope this is of interest.

Garry

[Anatoli]

Nice

The problem we have is IIS with WSC. Our filter was between WSC and FM WC.

When we had Filter on port 591 without WSC, everything was great.

Then we have to go for port 80, so we installed WSC. Because WSC is using fmp_xml (or xml?) to communicate with WC, the filter after while cut the connection WSC and WC

[Garry Claridge]

Some more experimenting today resulted in being able to serve FM data through SSL. As long as SSL is enabled on the Apache server the "Redirect" can be changed to:

Redirect /FMPro https://www.webdbonline.com/fmpro.php

Garry