Tuesday, January 12, 2016

Re: [google-cloud-sql-discuss] Android to google cloud sql connection

Hi,

I strongly recommend against embedding credentials for connecting to the database into your App. If you do this it will be possible for a user to extract them, and they will then be able to run any SQL statement those credentials allow, regardless of restrictions in the app.

The best solution is to run a server-side solution that accepts API calls from the app and makes appropriately restricted calls to the database. As you have indicated that  you don't want to use app engine I assume you don't want to maintain any server-side solution. You might want to look at pre-built solutions such as Firebase, which automatically provides a authenticated, correctly restricted API for making changes to a (built in) remote database as well as many other features.

Yours,
David

On Tue, Jan 12, 2016 at 4:51 AM, Sujeesh R <sujeesh.may25@gmail.com> wrote:
how to google cloud db access to android app without using app engine.I want directly access to gcld db to my app.any solution is there?

--
You received this message because you are subscribed to the Google Groups "Google Cloud SQL discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-sql-discuss+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-sql-discuss/393c86f4-3519-4031-9965-0f6c1cd61797%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Google Cloud SQL discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-sql-discuss+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-sql-discuss/CAJZK_bZikj2ah2AMbGfaTx85UBv9GE_Gu_iZAaJ5wHqh3OP1JQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

No comments:

Post a Comment