I need to understand phonegap mysql database remote security

[bernouli]

am running a phonegap app android where user can insert record into database via a form input.

question is during compilation and deployment of the app


1.will my database username,passwo rd,tables etc from php servers folder be compiled with the app.
2. can my phonegap app be decompile by hackers to get my database accounts from php server

3. if yes, how do i 100% protect my database account from being hacked via phonegap app downloaded by my users.
4. finally how do i also 99.9% protect my css,html,js files in www folder of the phonegap app

thanks

[Nepomuk]

Hi!

I have never used phonegap, so I can't tell you anything specific about that. But in general:

1. If your username, password, tables, etc are written in code that is used by the app and it is not dynamically received every time then yes, it will be compiled in the app. (Mind you: If you receive it dynamically than that could be intercepted too.)
2. Theoretically everything can be decompiled. It's just a question of how much work it would be and whether someone with the necessary skills thinks it's worth the effort.
3. There is no 100% protection but I would recommend giving the users only very limited access. Probably the best method would be to have a web service which offers APIs and only that has the login data. Then the app connects to this service rather than directly to the database.
4. CSS, HTML and JS files are all normally plain text, so protecting them will probably be difficult; not knowing what phonegap offers I don't know whether there is any (easy) way to do this.