Home/ Questions/Q 519071
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-13T08:00:10+00:00

On most API’s such as facebook and bebo, to use their API you must

  • 0

On most API’s such as facebook and bebo, to use their API you must get a key and a secret. What are some good methods for building a system like this? I will be using PHP/MySQL.

How can I basically verify that a user key and a secret are OK when an app sends an API request? I was thinking of storing them in MySQL, which is where I will have them stored no matter what. But I was wondering if there is some other method that is better for the verification process, instead of hitting the database on every single API request?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    If the key is an encrypted form of the domain and secret they’re using, you wouldn’t need to hit the db to verify them.

    if ($key != encrypt($domain . $secret))
    // die
    • 0