Introduction to FileMaker Pro web security    7

Web server security and the Web Companion

The software you use to publish databases, images, and other content to the Web is called 

web 

server

 software. Web server software performs the critical task of processing and fulfilling requests 

for data. When someone enters a web address into their browser, they are requesting the web server 

software at that address to locate data or an image and download it to their machine, where it can 

be displayed in their browser. To protect the integrity of this process, your web server has its own 

security mechanism.

The FileMaker Pro 

Web Companion

 is a plug in component of FileMaker Pro. The Web 

Companion functions as an HTTP server/web server/Common Gateway Interface (CGI) 

application, communicating with web browsers that request data from or submit data to a 

FileMaker Pro database.

When you publish your data using FileMaker Pro 

Instant Web Publishing

, the FileMaker Pro Web 

Companion functions as the web server, and security is provided by FileMaker Pro access 

privileges. As with FileMaker Pro desktop publishing, access via Instant Web Publishing is 

controlled by passwords. For more information about FileMaker Pro access privileges, see 

 FileMaker Pro access privileges  on page 13.

When you publish your data using FileMaker Pro 

Custom Web Publishing

, you can use the 

FileMaker Pro Web Companion as your web server. If you are using FileMaker Pro Unlimited 

software and the FileMaker Web Server Connector, you can use third party web server software, 

such as Microsoft Internet Information Server (IIS) or Apache Web Server. If you are using the 

FileMaker Pro Web Companion as your web server, security is provided by either access privileges 

or the Web Security Databases. See  Securing data for web publishing within FileMaker Pro  on 

page 12 for a comparison of these methods to determine which is best for your needs. If you are 

using a third party web server with Custom Web Publishing, your web server software may offer 

additional security features. Consult the documentation included with your web server software for 

more information.

Secure Sockets Layer (SSL) security for Custom Web Publishing

The Secure Sockets Layer (SSL) protocol is a standardized method for allowing encrypted and 

authenticated communication between web servers and web browsers. SSL can provide a 

commercial level of authentication, privacy and data integrity through encryption. Many web 

designers turn to SSL protection when security is the highest priority. For example, when receiving 

credit card information from a customer using a web browser, many web sites will use SSL to 

encrypt and secure the communication to prevent other people on the Internet from obtaining this 

information. Encryption through SSL converts information being exchanged between web servers 

and web browsers into unintelligible information through the use of mathematical formulas known 

as 

ciphers

. These ciphers are then used to transform the information back into understandable data 

by the intended recipient through 

encryption keys

.