| Re: monitoring IP address calls of a PHP application [message #175062 is a reply to message #175057] |
Tue, 09 August 2011 11:26   |
Jerry Stuckle
Messages: 2598
Registered: September 2010
Karma:
|
Senior Member |
|
|
On 8/9/2011 2:00 AM, E.Sajad wrote:
> Hi there,
>
> I have cross-posted this issue in two related groups: PHP and Software
> Testing.
>
> THE PROBLEM
> I have outsourced development of a web-based application to a
> freelancer. He will be delivering the software soon. However, after
> I perform acceptance testing and give the OK and release the funds to
> him, I might never be able to get hold of this person and according to
> our contract, once I "accept" the software, he will have no future
> obligations with respect to this project.
>
> So I'm trying to protect myself by somehow verifying that their
> delivered application:
>
> 1. Does not connect to/use/call any other web services or connect to
> other IP addresses (or servers) other than Google [note: the
> application extracts some info from Google search results]
> 2. Does not connect to any databases other than the one on the local
> server
> 3. Does not use any third-party libraries that I might have to pay for
> in the future.
> 4. Does not contain files that, although they need to be editable (for
> future modification, such as XML configuration files), have been
> converted into binary or non-editable or non-readable format.
>
> Basically, anything that will render me “ripped off” after I fully pay
> for the application because I won’t have access to the developer later
> on (and my budget is too tight to pay for consultants).
>
> Any fellow outsourcers who've run into this issue, please share what
> tools (preferably open-source) you used to verify any of the above
> items.
>
> I believe if I can somehow monitor all the IP addresses that the
> application calls (connects to) in
> real time, I'll be able to check if it's referencing any web services
> or sources other than Google as well as other than my own database.
> This alone will solve concerns number 1 and 2. But I don't even know
> how to do this! Should I install a monitoring application on my
> virtual dedicated server that would run in the background? What
> application(s) do you folks recommend?
>
> USEFUL INFO
> The application is written in PHP (not sure 4 or 5) and runs on a
> virtual dedicated server on a linux machine hosted by HostGator.
> Also, while acceptance testing, I will be testing the deliverable on
> this virtual dedicated server and I have full admin control over this
> hosting account. For this account I have access to a cPanel and a VZ
> control panel. Which control panel should I use for this purpose? I
> get lost in these control panels as it's the first time in my life I'm
> using a virtual dedicated server for a project.
>
> Thanks so much in advance! And hopefully this post will help other
> project managers as well.
> Kind regards,
> E. Sajad
I agree with Michael. If you don't trust someone, don't do business
with him at all. But you've already contracted with him, so you're
obligated to pay him. So pay him and don't use his code.
As for the rest - pay someone you do trust (if there is someone like
that) to examine the code.
But there are a lot worse things than what you're worried about.
--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex(at)attglobal(dot)net
==================
|
|
|
|
Calendar
Search
Help
Members
Register
Login
Home
]