MySQL DB is hackable?

Discuss
#7

This is my login screen blocks

blocks
blocks6963×2909 1.58 MB

@ShaikhSajidAli Please Correct Me!

#8

Referral Points and Joining of users. Basically they are increasing their points and referrals.

#9

@Rogerio_Rios How to fix SQL INJECTION? I am little bit understood about SQL Injection? Now How am i fix this

#10

I wrote something about that in chapter “PHP Script” here App Inventor Tutorials and Examples: MySQL | Pura Vida Apps
Taifun

#11

Thanks @Taifun
But how to prevent in kodular?

#12

Sorry, I posted on the wrong topic. @Kodular
The right topic is this:


It’s not the Mysql bank.
If your code is not done well they invade. One way is SQL INJECTION (ORACLE, MYSQL, POSTGREE …)

Which Server should I Use?
#13

Friend, the examples of links explain how it happens and what we should and should not do.
:+1:
https://www.w3schools.com/sql/sql_injection.asp

1 Like
#14

@Rogerio_Rios I am still not find any solution. Now what should do I for protection.

#15

I already mentioned

3 Likes
#16

I found the problem.
SQL INJECTION is not a problem.
The problem is they are capturing our Http data by using HttpCanary App.
They get every query and all data from the database.

Screenshot_2020-05-07-10-56-33
Screenshot_2020-05-07-10-56-331080×1920 352 KB
Screenshot_2020-05-07-10-56-41
Screenshot_2020-05-07-10-56-411080×1920 99.4 KB
Screenshot_2020-05-07-10-56-50
Screenshot_2020-05-07-10-56-501080×1920 73 KB
Screenshot_2020-05-07-10-56-57
Screenshot_2020-05-07-10-56-571080×1920 397 KB
Screenshot_2020-05-07-10-57-58
Screenshot_2020-05-07-10-57-581080×1920 45.5 KB
Screenshot_2020-05-07-10-58-17
Screenshot_2020-05-07-10-58-171080×1920 88.8 KB

Now How to prevent from this?
Please Help Me

1 Like
#17

Please don’t tag people to get attention.

#18

I am not get any attention.
I am just want to solution

1 Like
#19

By tagging people you send a notification to them. Imagine everybody to tag the same users if they have a problem. By tagging kodular you notify 9 people at once. They already see your topic. If they want to answer they will, no need to tag them.

#20

Ok I am apologize.

#21

I try to capture packets in my app with this program but when i run it my app returns connection failed and it doesn’t return anything. If i close the program then my app works again and receive data. Did you do something diffirent?

#22

Is it your phone rooted?
If not you have to install parallel space from http canary app.
Go to settings in side menu and download from this app.
You have to use parallel space and add parallel space in this app and then u able to capture packets.

#23

I install parallel space 64bit and my app returns me an error message that i setup if the response Code isn’t 200 but still not getting any data in HttpCanary.

#24

HttpCanary is rest api debugger app same as postman for web.
You url is exposed somewhere so anyone can post data via this

#25

Hi @ShaikhSajidAli,

this is an interesting discussion.

I do not know if it would work better to put the MySQL codes in php files on your hosting, as I indicate on this website:

and also encrypt the data, for example with this extension:

#26

Hi @ShaikhSajidAli
So i had just read lots of documentation about this.
I didn’t get any clue :pensive:. So how to protect url.