2

We are implementing the Salesforce webform module for our client and they are asking us if there are any security issues to consider by having SOAP installed on their server.

(The Salesforce API requires SOAP to be installed for drupal to communicate with it.)

Improve this question
1

PHP SOAP will not introduce any security issues in itself; it's more about how it is used. If it's used via unencrypted HTTP, for example, the data could be intercepted, like any other data. If you need the data to remain secure, then obviously this would be a consideration.

Improve this answer
2
  • Chris, thanks that is helpful. Though the info being submitted is standard webform lead capture stuff like "Name", "Address", "Company" etc.. I was thinking that https with a certificate would be a possibility.
    – Danny Englander
    Mar 22 '11 at 15:39
  • SOAP over SSL is definitely a possibility. I have no experience though, so the specifics are a bit beyond me!
    – Chris Cohen
    Mar 23 '11 at 12:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.