H hanyelmehy Well-Known Member Licensed User Longtime User Jan 4, 2019 #1 Any idea or real experience how to make the data communication between Android and a MySQL server more secure? did this enough ?use https
Any idea or real experience how to make the data communication between Android and a MySQL server more secure? did this enough ?use https
MarkusR Well-Known Member Licensed User Longtime User Jan 4, 2019 #2 u can use vpn from phone to your server if u use the app by yourself (vpn is implemented in android os) or this: https://www.b4x.com/android/forum/t...ation-of-rdc-remote-database-connector.61801/ Upvote 0
u can use vpn from phone to your server if u use the app by yourself (vpn is implemented in android os) or this: https://www.b4x.com/android/forum/t...ation-of-rdc-remote-database-connector.61801/
Erel B4X founder Staff member Licensed User Longtime User Jan 6, 2019 #3 Https will not really help. You should use jRDC2. Letting clients directly access the database is a bad practice. Upvote 0
Https will not really help. You should use jRDC2. Letting clients directly access the database is a bad practice.
H hanyelmehy Well-Known Member Licensed User Longtime User Jan 6, 2019 #4 Erel said: Https will not really help. You should use jRDC2. Letting clients directly access the database is a bad practice. Click to expand... android connect to mysql with php ,inside app i make encrypt for server url ,try to prevent sql injection ,use https my concern is can any one listen for network and get server url also get query string?? note :for now my server not support java application so i can't use jRDC2 Thank you Upvote 0
Erel said: Https will not really help. You should use jRDC2. Letting clients directly access the database is a bad practice. Click to expand... android connect to mysql with php ,inside app i make encrypt for server url ,try to prevent sql injection ,use https my concern is can any one listen for network and get server url also get query string?? note :for now my server not support java application so i can't use jRDC2 Thank you
Erel B4X founder Staff member Licensed User Longtime User Jan 6, 2019 #5 hanyelmehy said: my concern is can any one listen for network and get server url also get query string?? Click to expand... Even if you use SSL it will still be possible to get the URL by decompiling your app. Obfuscation will help a bit. If the database access is read-only then you can limit the SQL user privileges to reading. This way it will still be secure. Another option is to implement the specific queries in PHP. Upvote 0
hanyelmehy said: my concern is can any one listen for network and get server url also get query string?? Click to expand... Even if you use SSL it will still be possible to get the URL by decompiling your app. Obfuscation will help a bit. If the database access is read-only then you can limit the SQL user privileges to reading. This way it will still be secure. Another option is to implement the specific queries in PHP.
