New DB Security related concerns

[MahtabNihar (SweezDev)]

Hello, I’ve solved most of the issues regarding to migration into new firebase realtime db comp.
But there’s another big issue for me!

Previously I used to set public rules (read and write = true) on realtime database and obfuscate db url in blocks, which was pretty much secured enough before.

But now I had to upload google_services.json file on assets and hackers fetch db url from there and hack the db easily bcz of public rules. Authentication on my app is db depended (simple creds singup/singin). Now suggest me what is the quickest and best solution for me in this case.

Thanks.

[RaYzZz (Gianluca Franco)]

Hi dear,

@MahtabNihar

which was pretty much secured enough before

Hmm, I have some doubts about it, the documentation also states that it’s not ideal

The quickest solution is to add security rules!

If you can show us an example of how your database is structured (make sure to hide any sensitive data) and explain who should have access to what, we can help you with it.