V vcopola Member Licensed User Longtime User Apr 19, 2013 #1 Hello at first sorry for my English ..... After reading through the forum I see that the way to access mysql is not secure, and that posting on. Php du ser data and password does not give me much confidence .. Is this safe?? http://www.b4x.com/forum/additional-libraries-classes-official-updates/22291-mysql-library-jdbc.html Or is it like this?? http://www.b4x.com/forum/basic4andr...-connect-android-mysql-database-tutorial.html I'm starting on this and one of the things I need most is to have read access to SQL database or mysql, but surely.
Hello at first sorry for my English ..... After reading through the forum I see that the way to access mysql is not secure, and that posting on. Php du ser data and password does not give me much confidence .. Is this safe?? http://www.b4x.com/forum/additional-libraries-classes-official-updates/22291-mysql-library-jdbc.html Or is it like this?? http://www.b4x.com/forum/basic4andr...-connect-android-mysql-database-tutorial.html I'm starting on this and one of the things I need most is to have read access to SQL database or mysql, but surely.
peacemaker Expert Licensed User Longtime User Apr 20, 2013 #2 This can be secure, if to use encription hash. But need to study this big\complex system. Upvote 0
V vcopola Member Licensed User Longtime User Apr 20, 2013 #3 thanks .... I had not seen in the forum ... Upvote 0
grant1842 Active Member Licensed User Longtime User Apr 20, 2013 #4 Connecting with a serverside script such as php is a very secure option in my opinion since you don't have to store and send the login credentials through the app. Upvote 0
Connecting with a serverside script such as php is a very secure option in my opinion since you don't have to store and send the login credentials through the app.
peacemaker Expert Licensed User Longtime User Apr 20, 2013 #5 Did you know what HTTP- sniffer is? Password is sent as well as all other by HTTP. Upvote 0
grant1842 Active Member Licensed User Longtime User Apr 20, 2013 #6 I meant you don't have to store the login credentials to the entire database Upvote 0
peacemaker Expert Licensed User Longtime User Apr 21, 2013 #7 Database is the target, the password is just a resource... Upvote 0
Erel B4X founder Staff member Licensed User Longtime User Apr 21, 2013 #8 You can make the web service approach secure by using a SSL connection (https instead of http). Upvote 0
aalekizoglou Member Licensed User Longtime User Apr 22, 2013 #9 If you are going to use a server side script like mysqltunnel.php you can always use an encrypted connection based on https, or use mysqltunnel's encryption feature based on a variable hash key. Of course you can set the database credentials on the server side script, just to not transfer DB's password data over http. Also if you have sensible data to transfer to/from device/DB then ecnryption would be needed again based on https or hash key. Upvote 0
If you are going to use a server side script like mysqltunnel.php you can always use an encrypted connection based on https, or use mysqltunnel's encryption feature based on a variable hash key. Of course you can set the database credentials on the server side script, just to not transfer DB's password data over http. Also if you have sensible data to transfer to/from device/DB then ecnryption would be needed again based on https or hash key.
