A method and system for providing a secure method and process for accessing resources that are made available by a server. A demilitarized zone (DMZ) framework provides a frontend system that is protected by a firewall and separated from a backend system by a second firewall. The frontend system provides the user interface functionality common to the backend but contains no access directly to the resources that the user interface operates upon. Placing the user interface on a separate machine from the resource data provides an additional layer of security. In addition, separate communication protocols are used between the user and the frontend and between the frontend and the backend system. Thus, a malicious programmer or program will not know the location of the resource or the method for communicating with the backend server to access the resource.