Pierre,
It's only a security risk if I let the users WRITE to the database which
I have no intention of doing. The reason I'm trying to avoid and irev
script in the middle is that I don't want to have to connect and
disconnect every time a user asks for data. If you have a sample irev
script that would allow several hundred (I hope) users to read from this
database, I'd love to see it. Maybe it's not as bad (i.e., establishing
a new connection to the database every time) as I'm thinking.
Thanks!
len
On 10/18/2010 6:39 AM, Pierre Sahores wrote:
Ien,
If you just need to have a LiveCode client able to speak with the on-rev
PostgreSQL backend from anyware all over the world, why don't you choose to
send HTTP Posts from your client to an irev script witch will interact in
localhost mode with the PostgreSQL backend in full read/write before sending
back the pg response to the client ? I do this all the time and it works
perfect without any security lacks.
In tunning the pg config, anyone can make PostgreSQL available in full cloud
access mode but it's, at least, not a safe way to go...
HTH,
Pierre
_______________________________________________
use-revolution mailing list
use-revolution@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription
preferences:
http://lists.runrev.com/mailman/listinfo/use-revolution
