Architecture

When building your application, have security in mind.

  1. Use POST for updates/inserts, GET for SELECTs
  2. Use different db users for different actions
  3. Put include files in private directories
  4. Don't include files that users can name
  5. For private data, use a hashed id (username + password)

Next