Question

I’m concerned that when I use Facebook’s feed dialog I’m making my App Id public and thus open to exploitation. Is there much risk in my App Id being public? IF yes, what are those risks?Are there any ways that I can minimise those risks?

EDIT: The examples I’ve been looking at make use of the Javascript SDK, so getting the App ID would be relatively easy. https://developers.facebook.com/docs/reference/dialogs/feed/

I haven’t seen any examples using the PHP SDK, but I think the App ID would still be present in the URL.

EDIT2: Found some more information here App_id spoofing and misuse

Answer 1

No, there’s no risk. Your Application ID is already public information. It’s your Application Secret that you can’t leak.