Actually I already understood the first part, IŽll try to be more especific for what I have doubts about.
No App connects directly to the database but to a webserver that does the database transactions for you, the webserver does a sanity check on any input and makes sure that no app tries to do something that it shouldn't.
1 - So, what you mean with 'webserver that does the database transactions' did you mean, like a real computer with a fixed IP waiting and receiving data from the clients and doing the transacitons?
OR
2 - you meant like a PHP webpage that receives the clientŽs incoming request of information and then make the transaction?
ps. The database stays hosted in a webpage at those webpage service providers.
Thanks in advance in case if you post/awnser something that could help or enlight my narrow knowledge of 'webserver security' instead of negative criticism that would want make me shut my project down.
