Android Question What the best way to protect urls (GET POST) ?

Douglas Farias

Expert
Licensed User
Longtime User
Hi all.
i made some tests in some apps of google play with Fiddler.
this programm get the GET and POSTS of apps, if your app make a get ou post i can get it with fiddler.

my question, its possible block the fiddler and another programs like fiddler?
the fiddler use a proxy and you see on pc all the url requests. (HEADER,XML,JSON etc...)

this is a big problem for a lot of apps, with register/login or selects etc....

what the best way to protect one app of this program? (if possible )

what the best way to hide a url inside the app?

thx
 
Last edited:

OliverA

Expert
Licensed User
Longtime User
Use SSL?
 
Upvote 0

KMatle

Expert
Licensed User
Longtime User
Upvote 0

Arthur Ávila

Member
Licensed User
I use POST requests only and I encrypt the content. On the php side decrypt it. You can use 2 different keys. One standard for the login and a 2nd (changing) key for the "session" to encrypt the data.

I understand the idea, but could you show a small example with the implementation?
Thank you.
 
Upvote 0

MarkusR

Well-Known Member
Licensed User
Longtime User
Just add a https?
at least you must be sure you connect to the correct server or it looks like client-ssl-anyserver-ssl-yourserver
 
Upvote 0
Cookies are required to use this site. You must accept them to continue using the site. Learn more…