on-rev remote database

Len Morgan kttkinfo at gmail.com
Mon Oct 18 10:25:35 EDT 2010


It's only a security risk if I let the users WRITE to the database which 
I have no intention of doing.  The reason I'm trying to avoid and irev 
script in the middle is that I don't want to have to connect and 
disconnect every time a user asks for data.  If you have a sample irev 
script that would allow several hundred (I hope) users to read from this 
database, I'd love to see it.  Maybe it's not as bad (i.e., establishing 
a new connection to the database every time) as I'm thinking.


On 10/18/2010 6:39 AM, Pierre Sahores wrote:
> Ien,
> If you just need to have a LiveCode client able to speak with the on-rev PostgreSQL backend from anyware all over the world, why don't you choose to send HTTP Posts from your client to an irev script witch will interact in localhost mode with the PostgreSQL backend in full read/write before sending back the pg response to the client ? I do this all the time and it works perfect without any security lacks.
> In tunning the pg config, anyone can make PostgreSQL available in full cloud access mode but it's, at least, not a safe way to go...
> HTH,
> Pierre

More information about the Use-livecode mailing list