MySQL DB is hackable?

Discuss
#21

I try to capture packets in my app with this program but when i run it my app returns connection failed and it doesn’t return anything. If i close the program then my app works again and receive data. Did you do something diffirent?

#22

Is it your phone rooted?
If not you have to install parallel space from http canary app.
Go to settings in side menu and download from this app.
You have to use parallel space and add parallel space in this app and then u able to capture packets.

#23

I install parallel space 64bit and my app returns me an error message that i setup if the response Code isn’t 200 but still not getting any data in HttpCanary.

#24

HttpCanary is rest api debugger app same as postman for web.
You url is exposed somewhere so anyone can post data via this

#25

Hi @ShaikhSajidAli,

this is an interesting discussion.

I do not know if it would work better to put the MySQL codes in php files on your hosting, as I indicate on this website:

and also encrypt the data, for example with this extension:

#26

Hi @ShaikhSajidAli
So i had just read lots of documentation about this.
I didn’t get any clue :pensive:. So how to protect url.

#27

i have same problem . People using script to hack database in my people add money via referral code

#28

Same with my case. I don’t know what should do we now?

#29

Use Firebase. And use the secure google login.

#30

But firebase not have data structure like MySQL and its more cheaper than firebase

#31

furthermore we cannot run queries in firebase . can we?
But if @Kodular adds firebase firestore component then it would be possible…

#32

Well for me as i developing for my project i make api for mysql using jwt and slim or node.js it prevents sql injection and other attacks

#33

Would you like share some tips or tutorial. i am beginner and kodular help me lots learn how to develop app without coding

#34

Thats nice but if we not allow the user to run any query by his own and everything is highly programmed in kodular even then he can hack???

#35

I didn’t believe on this all thing depends on your logic not kodular

#36

Did you try with rooted phone or with non-rooted. I was able to sniff only with my rooted tablet.

#37

I was also tried in rooted phone

#38

So with non-rooted phone?

#39

I had try but not successful.

#40

So the problem is the users with rooted phones. You can use Device Utilities and forbid these users to open your app. If they can’t open your app and run the queries they will not get any response back.