Matt6607699
Posts: 0
Joined: Sat Jan 25, 2014 7:18 am

Not mobile app but I use app server code and db for a website. how to prevent unauthorized db posts?

This may be a bumb question but here goes. I have a website that updates appery DB entries through appery server script. How do I prevent people from making entries to my db by just copying my js code? The server script hides the db master key but will execute if someone does their own request through the dev console.

Illya Stepanov
Posts: 0
Joined: Mon Mar 18, 2013 8:48 am

Not mobile app but I use app server code and db for a website. how to prevent unauthorized db posts?

Hi Matt -

I'm not understand how exactly you are implemented server scripts on your site, but to make them secure you need to include some athentification logic to your scripts calls, like for example our prebuild Database User services with session tokens.

And call to retrieve data that was updated by user will looks like this:
https://devcenter.appery.io/documenta...

Return to “Issues”