Looking for a way not to keep user/password in php code

Hi there,

Does anyone know of a way to make API calls w/o storing the user name and password in the php code? Our security department feels its a securty risk. They are asking if there is a way to implement a client-side certificate for Salesforce connection that the Salesforce-side will validate before accepting a connection

Thanks!

Jim

August 13, 2009
·
Answer
·
Like
0
·
Follow
0

msimonds
I am not sure that you can do this, but there are two ideas:

1) I am not sure what the client certificate is for, but you can download that from Setup > Develop > API. You would need to read up on what it is exactly for

2) create a login script for PHP and place it somewhere outside your web root then require_once on that script and you will be able to use the login from that point on. That is what I do and it works perfectlly, something like this > http://www.mikesimonds.com/centrallized-php-login-script-salesforce-php-toolkit-scripts-t164.html

Hope this helps, not sure it will

~Mike

August 17, 2009
·
Like
0
·
Dislike
0

You need to sign in to do that.

Need an account? Sign Up

Have an account? Sign In

Dismiss

Browse by Topic

Welcome to Support!

Show

sorted by

Looking for a way not to keep user/password in php code

You need to sign in to do that.