I have a unity WebGL application that communicates with a server. The server executes commands sent from Unity, where each command is a different php script that unity calls.
Here is what im doing now (certainly NOT secure at all).
When my Unity app wants to add something to the data base it uses WWW to call
Where it keeps sending the username and password with each request so that the server can validate that its a valid user making the request, but of course this is not secure since a hacker can easily sniff this.
Anybody knows the correct hack proof way of doing this?
If I select the “developer tools” in chrome or firefox, it shows me all the network transactions called by the browser, including all php functions and its parameters plain as day!..im like WHAT!!!
So the browser lets hackers easily find out which php functions im calling and all the parameters!!!
thats pure madness!!!
Anybody knows if i use SSL will the browser still be able to show all that in plain text or will all that get encrypted so that hackers cant see what im doing?