We currently have an application that we deploy via the web, users access it by connecting to a link which opens an executable file. This file was compiled with visual foxpro.
My question is - is this setup secure? Are my transactions, data transmission to and from the server secured? Or is it better to develop a web application in PHP for this?
I'm using mysql database on ubuntu server.
Hopefully this is clear enough for you.
Man-in-the-middle attacks - The site uses HTTP only and is not using SSL/TLS encryption.
Access control - Only our in-house programmers are authorized to upload new versions of the application. The new version will be evaluated first on a pre-production system before replacing the current version.
Server Security - We are using SSH for remote administrative access. The server is also hosting samba for internal network file server, and there are also those who access the same server for secure file transfer.
Software security - Although we have very competent developers, I am not sure if they are trained in secure software development or use static analysis tools.
I may have to suggest a change on our current system due to some security lapses. I would leave this thread open for a few more days to seek for more advice from professionals like you. Systems (data, network, server) security is new to me and I am really interested in learning more, I'd appreciate it if you can give me a few sources to start learning from.