Question

Our application gets all the data from PHP/Mysql server in XML format

but now client don’t want data to be appeared as it is,
he fears, anyone who knows those .php file links can access all data on server and will become a competitor to him.

so i want to know is there any encryption available which i can use in php and decryption in ios.

or SSL is the only option?

EDIT: our php file returns XML data and client is bothered that competitors can get data,
so i want to send encrypted data into XML and decrypt it in iPhone, so is there any good solution for that?

Thanks

Answer 1

SSL is the most straightforward option, but you should probably also add a challenge/response so that every request is accompanied by a one time hash. This means that only devices that can create a valid ‘key’ can access the data, as opposed to anyone who can see the URL endpoint.