Question

So I started looking into node-mysql since my entire site is built with PHP, but I’d like to use node/socket.io for smooth asynchronous user-end updates. However there is one issue I’m seeing with node-mysql which I haven’t quite gotten an answer yet. How is the login information for the mysql server not public information?

according to the documentation https://github.com/felixge/node-mysql you connect to the database like so

var mysql      = require('mysql');
var connection = mysql.createConnection({
  host     : 'localhost',
  user     : 'me',
  password : 'secret',
});

connection.connect();

connection.query('SELECT 1', function(err, rows, fields) {
  if (err) throw err;

  console.log('Query result: ', rows);
});

connection.end();

So what’s stopping a user from just plopping the server file into their navigation bar and viewing the login information for the mysql server? I’m extremely confused by this, could someone please explain it to me?

Answer 1

Node.js is server-side JavaScript. You would place those files in a similar place that you place your PHP files, and not in a publicly accessible location.

You run your Node application, which serves up the public HTML/CSS/JS files you want (or alternatively, serialized data such as that in JSON form).