network.request "POST" method, can I insert a query in any of the params?

Getting Started Newbie Questions
#1

I was wondering If it is possible that a network.request can pass an MySQL Query to be POSTED in the back end, so that I can insert/read/delete/update a row in my remote database server? or are there any possible solutions to my problem?

#2

I assume you have a LAMP server (Linux/Apache/MySQL/PHP)?

You need to create a php script on the server which does the inserting/deleting/updating for you. You’d only pass the data to be inserted/updated.

You should *never* pass SQL statements to the script to be executed on your server. Why? You can easily become a victim to SQL injection attacks that can wreak all kinds of havoc on your data.

To add an extra level of security you could use prepared statements and parameterized queries. These kinds of SQL statements are parsed by the database server separately from any parameters. This way it’s impossible for an attacker to inject malicious SQL.

This kind of stuff requires a good understanding of server-side programming with PHP / MySQL.

After a quick search, I found this tutorial on the web which goes through some basics:

http://www.freewebmasterhelp.com/tutorials/phpmysql/1

#3

Okay got it, thanks though :slight_smile:

#4

Is corona’s GET and POST the same as PHP? I have no problem in the post and get in HTML to PHP, is it the same in corona?

#5

I assume you have a LAMP server (Linux/Apache/MySQL/PHP)?

You need to create a php script on the server which does the inserting/deleting/updating for you. You’d only pass the data to be inserted/updated.

You should *never* pass SQL statements to the script to be executed on your server. Why? You can easily become a victim to SQL injection attacks that can wreak all kinds of havoc on your data.

To add an extra level of security you could use prepared statements and parameterized queries. These kinds of SQL statements are parsed by the database server separately from any parameters. This way it’s impossible for an attacker to inject malicious SQL.

This kind of stuff requires a good understanding of server-side programming with PHP / MySQL.

After a quick search, I found this tutorial on the web which goes through some basics:

http://www.freewebmasterhelp.com/tutorials/phpmysql/1

#6

Okay got it, thanks though :slight_smile:

#7

Is corona’s GET and POST the same as PHP? I have no problem in the post and get in HTML to PHP, is it the same in corona?