Yes..
It will get hacked if you have a public read and write.
What should I do to secure the data in my Firebase Project?
Use Firebase Authentication 3.0 extension.
[Free] Firebase Authentication V.3.0 (Update link) #ThunkableClassicExtensions
Hi, everybody! mirxtrem apps here, bringing you the lastest update for this extensions. Suscribe to my channel for tutorials: Firebase Tutorial in course New Features: Federated identity provider integration (to use with FacebookLogin and GoogleLogin extensions). [image] Update profile: You can update a user’s profile (display name / photo URL). [image] Error to compile apk fixed. Download it here: com.mirxtremapps.FirebaseAuth.aix (37.8 KB) Thanks! Firebase Auth Tutorial - Si…
DB security is established by a combination of rules and authentication. Assuming you have authenticated with the above extension here are the different ways to setup rules.
Test/No security. Anybody can read or write
“rules”: {
“.read”: true,
“.write”: true
}
Locked Up/Full security. Nobody can read or write
“rules”: {
“.read”: false,
“.write”: false
}
Only authenticated users can read and write
“rules”: {
“.read”: “auth != null”,
“.write”: “auth != null”
}
Read All, only write their own
“rules”: {
“posts”: {
“.read”: “auth != null”,
“$uid”: {
“.write”: “$uid === auth.uid”
}
}
}
Read and write their own
“rules”: {
“posts”: {
“$uid”: {
“.read”: “$uid === auth.uid”,
“.write”: “$uid === auth.uid”
}
}
}