CODEWITHSUNDEEP
jdbcgoogle-apps-script
wgw
wgw

Reputation: 601

apps-scripts: remote database password security

I connect to a remote sqlserver database using the jdbc service. My apps script has my password and userid. Is there a security risk involved. I ask because javascript is open to inspection; are app-scripts open to users?

What is the best way to get that secure information into an app?

Upvotes: 2

Views: 1386

Answers (2)

mzimmerman
mzimmerman

Reputation: 940

Use the UserProperties service. It's values are only available to you and if you decide to make the application multi-user, you could even direct users to store their unique sql username/password in their own UserProperties.

Upvotes: 1

Srik
Srik

Reputation: 7965

Even hard coded values don't show up in the javascript when rendered by the browser. That is because all the code that you write runs on the server side (except client handlers). However, if you share a script or spreadsheet with the script with another user, the code is visible to the other user.

You can store your username and password in a spreadsheet that only you have access to and read from there during runtime. However, ensure that the script runs under your id (i.e only published as a web app).

Upvotes: 3

Related Questions