We are implementing the Salesforce webform module for our client and they are asking us if there are any security issues to consider by having SOAP installed on their server.

(The Salesforce API requires SOAP to be installed for drupal to communicate with it.)

1 Answer 1


PHP SOAP will not introduce any security issues in itself; it's more about how it is used. If it's used via unencrypted HTTP, for example, the data could be intercepted, like any other data. If you need the data to remain secure, then obviously this would be a consideration.

  • Chris, thanks that is helpful. Though the info being submitted is standard webform lead capture stuff like "Name", "Address", "Company" etc.. I was thinking that https with a certificate would be a possibility. Mar 22, 2011 at 15:39
  • SOAP over SSL is definitely a possibility. I have no experience though, so the specifics are a bit beyond me! Mar 23, 2011 at 12:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.