Skip to main content
10 events
when toggle format what by license comment
Sep 28, 2012 at 20:02 comment added GrandmasterB Sorry if my initial answer was vague - it wasnt clear what you were asking until you further clarified it in the comments. But yes, have your node app handle all db calls. Much safer.
Sep 28, 2012 at 19:39 vote accept Aust
Sep 28, 2012 at 19:39 comment added Aust Thanks for the design input. That will help a lot. If I designed it so that my website talked to my node.js server and all of the DB interactions were always from that server I might as well only have 1 server and 1 database. Which obviously means I won't have any security issues. Nice solution. :)
Sep 28, 2012 at 19:22 comment added GrandmasterB @Aust see my above edits
Sep 28, 2012 at 19:21 history edited GrandmasterB CC BY-SA 3.0
added 724 characters in body
Sep 28, 2012 at 15:54 comment added Sripathi Krishnan @Aust - If you don't write secure code then yes, you could run into security issues.
Sep 28, 2012 at 15:36 comment added Aust @SripathiKrishnan - Ok cool. But if I wrote my code to have the website connect to Redis, then that's when I would run into security issues, yes?
Sep 28, 2012 at 5:00 comment added Sripathi Krishnan @Aust Redis runs on JavaScript is false. Redis has nothing to do with javascript. Node.js applications connect to Redis over a tcp/ip socket. Javascript on browser cannot manipulate Redis; unless you explicitly write code to allow it.
Sep 28, 2012 at 4:47 comment added Aust If this is possible... Yes that was my question that you didn't answer. ;) Is that possible? I disagree with you when you say This has absolutely nothing to do with the database being used. and this is why: Redis runs on JavaScript. When it is on a node.js server it is fine because users don't have access to the JavaScript being executed on the node.js server. But if the website is connecting to Redis then it seems that users would have access to that JavaScript and could manipulate it. Is that true or false?
Sep 28, 2012 at 3:54 history answered GrandmasterB CC BY-SA 3.0