Database access security iOS

[ekek]

Hi:

I'm developing an App for iOS that can read and writa data to a database in a server. Everything can be done, but we have a concern about putting the login data inside the code. Does anyone knows a best practice in order to connect to a database without embedding the user and password inside the code?

Thanks

[FourthWorld]

SSL is the solution most sites use to protect the stream.

[monte]

If they are in the script then password protection on the stack will secure them

[ekek]

Thanks for your comments!

[Klaus]

Hi ekek,

another way is to store the MD5Digest of the password in a custom property!
Can be compared but that's it
...
## DO this in the message box or wehreever, at least NOT in the stack!
set the cMD5Password of stack "your db stack here" to md5digest("Dabatabes password here...")
...

Then you can later ask the user for a password and compare its md5digest with the stored md5digest:

Code: Select all

...
ask password clear "Enter password for database access:"
put it into tuserPWD
put the cMD5Password of stack "your db stack here" into tStoredMD5
if tStoredMD5 <> md5digest(tUserPWD) then
  ## wrong password
  exit to top
end if
...

Best

Klaus

[Adrien Bron]

I use SSL for this class of problems.