3 ms·
well, you are exposing the database at the javascript level. If it is javascript then you can mess with it in your browser via the developer console. So if you
by Rhapso 13y ago
well, you are exposing the database at the javascript level. If it is javascript then you can mess with it in your browser via the developer console. So if you are using firebase via javascript your application is fundamentally insecure. You cannot even put serverside sanity checks like "this person should not ask for this value" or "nobody should have a string for a score" because of firebase's limitations.
- mikelehen 13y agoThere was a time when that was true, but these days you can easily do those sorts of things using Firebase security rules: https://www.firebase.com/docs/security/security-rules.html https://www.firebase.com/docs/security/security-rules.html
- Rhapso 13y agoAha! My only use of firebase was writing a chat application for fun back at their launch marketing push. This is good to see, and I think I might go play with it more.
- Kiro 13y agoI still don't see how setting security rules would prevent cheating. I would love to know how to fix this issue as I'm making a similar MMO game with Firebase.
- deleted 13y ago[deleted]
- deleted 13y ago[deleted]
- deleted 13y ago[deleted]
- abrkn 13y agoYou have obviously never tried Firebase.
- Kiro 13y agoSo how would you prevent people from just setting whatever score they want in this game?