Securing the connection between android and php -


i developing android app user can signup using android facebook sdk. using google volley library make http requests php page receive json data mysql database. want store personal information user , retrieve them later database. spent entire day looking on google ways on how secure android-php connection. 1 of popular solution came across send hash key post request , verify hash key via php. so:

if($_post['secret'] != '3ch6kncsymva2fdghfdfgmf3jqmuctcm') {     header('http/1.1 403 forbidden');     error_log("error: wrong secret: " . $_post['secret']);     exit("access denied"); } 

the problem code above hackers can de-compile apk file , @ code , figure out key hash is. since don't have custom login system username , password authenticate user, can use secure connection between android , php? need example or link tutorial or suggestion established solutions such problem.

this question isn't new on stack overflow, other similar questions 2 or 3 years old considered historic in rapid development world of android.

securing connection between server , app? use https. if want make app can access web service- there needs kind of secret shared between them check. password, entered user. fact user enters secures app hacking, info isn't in app. if aren't going have user enter it, needs in app. means hacker wants it. can obscure little bit, find eventually.

basically, ensure can't reverse engineered need user , full login system.


Comments

Popular posts from this blog

javascript - Jquery show_hide, what to add in order to make the page scroll to the bottom of the hidden field once button is clicked -

javascript - Highcharts multi-color line -

javascript - Enter key does not work in search box -