Secure socket communication between PHP and C++

Question

I have a web page communicating with a server application using sockets. Security wasn't a concern in the past but I've decided it's time to implement some. Right now the page is communicating with the server by sending strings in plain text with commands to execute on the server. What would be the best way to secure this communication so that messages aren't being sent in plain text?

I considered encrypting the messages being sent using a shared key system such as AES, but I don't have much experience working with encryption and the Google results for implementing code such as this were quite intimidating.

The server is written in Qt C++, but is specifically for Windows.

If you're using sessions, you could use Diffie Hellman key exchange to set up session encryption over insecure connection. — Ja͢ck
– Ja͢ck, Commented Feb 4, 2013 at 6:43

Frederico Schardong · Accepted Answer · 2013-02-04 06:40:28Z

1

You can use OpenSSL to encrypt your information. It supports AES and SHA* algorithms, you don't need to implement them, you just have to use the library at both C and PHP applications.

answered Feb 4, 2013 at 6:40

Frederico Schardong

2,1947 gold badges40 silver badges65 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Carey Over a year ago

Also, Qt already includes SSL server socket support using OpenSSL; see dgraves.org/content/qt-notes-working-qsslsocket for example.

Collectives™ on Stack Overflow

Secure socket communication between PHP and C++

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related