Android Question Mysql + PHP // How to make it secure?

[Facilauto Juan]

Hello there!

I have checked out the mysql-php tutorial here:
http://www.b4x.com/android/forum/threads/connect-android-to-mysql-database-tutorial.8339/

But I need how to do that in a secure mode. Any advise on that?

 

[Erel]

The main problem is that a hacker can reverse engineer your app and change the queries that are sent. Do you need to both read and write data to the db?

 

[Facilauto Juan]

Yes, I need to do both, read and write data.

 

[Erel]

You can modify the PHP script and set the SQL statements there instead of sending them from the device. You can give each statement a number and then send the number instead of the statement. It requires some PHP knowledge.

 

[Facilauto Juan]

Thanks, Erel, i'll do it that way.