API Secure

[Abdul_Qadir1 (Abdul Qadir)]

Need Extension developer i have python api

[Rogerio_Rios (Professional Support)]

I need extension developer

you can post here what you want to do and what is your php api, maybe you don’t need an extension.

[Abdul_Qadir1 (Abdul Qadir)]

I saw already this post I have a recharge app It has been hacked three times, so I’m asking you to make an extension i m using web compnent

[iamwsumit (Sumit Kumar)]

@Abdul_Qadir1

I’m asking you to make an extension

And you think that the extension can protect your API from hacking​.

@Abdul_Qadir1

It has been hacked three times,

Extension can’t protect your API, you will have to make your API as much as strong you can. It is the only way that you can use for making it difficult to hack.

[Abdul_Qadir1 (Abdul Qadir)]

my API is very strong But hacker get the endpoint out of the app, so I’m making an extension

[iamwsumit (Sumit Kumar)]

@Abdul_Qadir1

my API is very strong

Then why it got hacked three times??

@Abdul_Qadir1

I’m making an extension

May you tell me how a extension can protect it?

[Abdul_Qadir1 (Abdul Qadir)]

Then tell me how to secure API?

[Rogerio_Rios (Professional Support)]

@Abdul_Qadir1

Then tell me how to secure API

Google … There are many security experts.

*#off-topic"

today I used Google to understand annotation, build.xml, import …

[Abdul_Qadir1 (Abdul Qadir)]

I’m calling API from Google Spreadsheet, but how do hacker extract?

[iamwsumit (Sumit Kumar)]

#off-topic

@Rogerio_Rios

today I used Google to understand annotation, build.xml, import …

@Rogerio_Rios are you starting making extension

[Abdul_Qadir1 (Abdul Qadir)]

Can run the kodular app on a stratic IP?

[Abdul_Qadir1 (Abdul Qadir)]

I mean, when call an API from the web component, can set a static IP?

[iamwsumit (Sumit Kumar)]

@Abdul_Qadir1

stratic IP?

I don’t know much about APIs. So I can’t help you much or also as you have already mentioned that it is python script. May be I will able to help you in a php script. You should google it as @Rogerio_Rios said. You will definitely get something from there​

[Abdul_Qadir1 (Abdul Qadir)]

I’ve been researching for a long time and I haven’t found anything so I put it in the community today

[Abdul_Qadir1 (Abdul Qadir)]

No matter how much I score Api, anyone can hack when Api end point is found.

[Abdul_Qadir1 (Abdul Qadir)]

Can you help me how to score in PHP?

[iamwsumit (Sumit Kumar)]

@Abdul_Qadir1

anyone can hack when Api end point is found.

What do you mean by an endpoint.
I didn’t get your endpoint.

@Abdul_Qadir1

No matter how much I score Api

It is completely wrong. Hacking chances are more when your API is less secure. It is totally wrong statement.

[Maxtern]

@Abdul_Qadir1

I saw already this post I have a recharge app It has been hacked three times, so I’m asking you to make an extension i m using web compnent

Hmm. I have one way to protect your app. Use php script to load API key and encrypt your API to AES algorithms and use 2-3 PHP script to load API in encrypt form. Use AES encryption is powerful and it can’t decrypt easily. Make your app like " your app not certain any API key because if user decompile your app than he/ she can see your API key. There are more ways to protect it. Now it depends on you make some more logic and improve the security.

[Abdul_Qadir1 (Abdul Qadir)]

How to add php script in kodular

[Rogerio_Rios (Professional Support)]

PHP script always run in server…
In Kodular , we use web Component to POST pra Get.

JWT -Json Web Token