Accessing iSeries5 DB2 with PHP

[a6m1n0]

I am able to connect to i5 DB2 from a remote IIS 5 web server using PHP COM and ODBC, but my companies senior analyst does not like the fact that in PHP the user/pass is stored in plain text (public access web server), and they dislike ODBC in general for access to the DB2.

I have checked out the specs on Zend Studio and also Zend Guard which protects the scripts -- how I do not know, this is just what it says on Zend's web site. But now my company has acquired licences for Adobe CS3 it is hard for me to justify the purchase of Zend Studio.

So, back to the point: I need a safe alternative to accessing the DB2 from PHP *without* using ODBC and *without* storing the user/pass in plain text. I think a proprietary ActiveX component is in order, but this is a little out of my league. I do have access to Delphi 7 though.

I need to access this data as of right now RPG apps *push* static HTML documents onto the IIS web server yet I am asked to produce a search engine for our site in PHP.

Ideas anyone? I'm all ears.

Thanks

-a6m1n0

Curiosity only kills cats.

 

[jpadie]

can't you store the user/pass combination outside of the web root or on a network share or something? or store the combination in crypted form and the decryption key on a floppy disk in the drive or something.

why so against odbc?

 

[a6m1n0]

can't you store the user/pass combination outside of the web root or on a network share or something?

The biggest concern from our senior analyst is that if the web server is ever compromised whatever plain text credentials stored on the server would also be compromised. And although I am a MS server fan/nerd/geek (take your pick) I have to agree that you can count on MS missing something and a hacker exploiting it. WMF flaw ring a bell?

I suggested DSN, but that was shot down since windows apprently has some flaw with DSN that can allow a server to be compromised. (I have yet to see any documentation of this however.)
I suggested ODBC and loading the driver at runtime using COM, and while this worked this also was shot down due to some misunderstanding between a Java app locking up the i5 when they thought it was my PHP app, so the i5 user was locked out.
I suggested a "roll your own soap" method where based on a simple token system that only the Java and PHP server could understand, the PHP could make requests to the Java app for XML documents to public data. Still waiting on the Java developer to even write a demo.

why so against odbc?

The understanding of ODBC for the senior analyst is unique: his background is IBM Enterprise, and his disdain for ODBC comes from an Intranet perspective and 35+ years experience. I was forwarded an email that a respected AS400 expert wrote about ODBC and it was far from flattering -- basically insinuated that ODBC was brought to earth by the devil himself, lol.

A consultant was hired to discuss the situation and help provide solutions, but that was two weeks ago and I haven't heard anything else about it.

Thanks for taking the time to respond jpadie -- if you come up with any other suggestions/ideas I am still all ears. I am still mulling over your previous suggestions.

And where does one find some one to write a DLL component nowadays anyway?

-a6m1n0

Curiosity only kills cats.

 

[as400pro]

Are the i5 admins open to installing PHP on the i5?
I just loaded it on our i5 system using the supplied installation instructions and it went smooth.
The Zend Core and Studio are free for the i5. You can read the features list, and find download links, at the following:

http://www.zend.com/products/zend_core/zend_for_i5_os

Installing PHP on the i5 gives you direct access to the DB2 database without having to use ODBC.
I am just starting to learn PHP myself, I use JSPs and Servlets for web apps but thought I would toy with PHP since it is now available on the i5.


T. Bishop

http://www.as400pro.com