Home/ Questions/Q 8191099
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-07T03:50:41+00:00

I have an iPhone app that is using my PHP API on the server

  • 0

I have an iPhone app that is using my PHP API on the server but it is currently open if someone knows the URL. I want to make sure that no one can use this API until I am ready to make it a public API (if I even do).

I have read this article but I am unsure what they mean when they say:

[CLIENT] Before making the REST API call, combine a bunch of unique data together (this is typically all the parameters and values you intend on sending, it is the “data” argument in the code snippets on AWS’s site)

I don’t understand how if I hash the parameters I plan on sending with my api secret how this is more secure than just hashing the API secret if I send the parameters/values unencrypted.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    HTTPS the API and use an API key. Then you’ll know that only people (you in this case) with the key can have access to the API.

    You’re correct about it not being more secure. That’s why I suggest you SSL the connection. Unless you plan on encrypting everything you transmit back and forth.

    The public/private key scenario will also work well. HTTPS requires very minimal effort.

    • 0