1

I want to make a client-side, Windows-based application that allows the user to register and it will store the registration details in an online MySQL server.

However when i googled ways to do this, I found that to establish such a MySQL connection I should provide an SQL user with write permissions and also provide that SQL user’s password (All these should be in my code).

This leads to a problem; if someone decompiled my application, they could get my SQL user and password, and they could see and do anything to my SQL database.

Is there anyway to prevent this?

1
  • 1
    I would never leave a database exposed to the internet, period. Nov 25 '19 at 3:32
5

Yes and no.

First the no: As you have realized, if any data you put in an app that you send to a client can be extracted from it. You can take steps to make it harder to find the password (obfuscation, encryption, etc) but as a general rule of thumb, never put anything in the app that isn't supposed to be public.

So how do you protect your database password? Simple: don't store it in the app. Make a small web application that the app sends the registration details to, and then have the web application store things in the database. This way credentials never leave your control.

1
  • 2
    Basically like an API or middleman that transfer your credentials in a encrypted and secure way.
    – Cash-
    Nov 25 '19 at 5:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.