Android Question How do I make the data communication between an Android and a MySQL server secure?

[hanyelmehy]

Any idea or real experience how to make the data communication between Android and a MySQL server more secure?
did this enough ?use https

 

[MarkusR]

u can use vpn from phone to your server if u use the app by yourself (vpn is implemented in android os)
or this:
https://www.b4x.com/android/forum/t...ation-of-rdc-remote-database-connector.61801/

 

[Erel]

Https will not really help. You should use jRDC2. Letting clients directly access the database is a bad practice.

 

[hanyelmehy]

Https will not really help. You should use jRDC2. Letting clients directly access the database is a bad practice.

android connect to mysql with php ,inside app i make encrypt for server url ,try to prevent sql injection ,use https
my concern is can any one listen for network and get server url also get query string??
note :for now my server not support java application so i can't use jRDC2
Thank you

 

[Erel]

my concern is can any one listen for network and get server url also get query string??

Even if you use SSL it will still be possible to get the URL by decompiling your app. Obfuscation will help a bit.

If the database access is read-only then you can limit the SQL user privileges to reading. This way it will still be secure. Another option is to implement the specific queries in PHP.