<div>
https is a good idea. Thank you.
</div>


<div>
Agree about HTTPS. &nbsp;<br />
<br />
This article has some more background information on APIs as well as a simple example of one that uses an API key.<br />
<a href="https://www.experts-exchange.com/Programming/Languages/Scripting/PHP/A_12239-Introduction-to-Application-Programming-Interfaces.html" rel="ugc">https://www.experts-exchange.com/Programming/Languages/Scripting/PHP/A_12239-Introduction-to-Application-Programming-Interfaces.html</a>
</div>


Agree about HTTPS.  

This article has some more background information on APIs as well as a simple example of one that uses an API key.
https://www.experts-exchange.com/Programming/Languages/Scripting/PHP/A_12239-Introduction-to-Application-Programming-Interfaces.html [https://www.experts-exchange.com/Programming/Languages/Scripting/PHP/A_12239-Introduction-to-Application-Programming-Interfaces.html]

<div>
<div class="content wysiwyg-content">
Hi,<br />
<br />
I'm creating an API from php which is called from some apps (Android and iPhone). This API has some calls for getting values on a database on the central server, so that data can be cached on the app. Also, this API has some calls for adding records on this database.<br />
<br />
I am worried about security. I would like to avoid someone to add some gargabe records, and also avoiding someone to use the API to get a copy of our full database.<br />
<br />
How can this be accomplished?
</div>
</div>


Hi,

I'm creating an API from php which is called from some apps (Android and iPhone). This API has some calls for getting values on a database on the central server, so that data can be cached on the app. Also, this API has some calls for adding records on this database.

I am worried about security. I would like to avoid someone to add some gargabe records, and also avoiding someone to use the API to get a copy of our full database.

How can this be accomplished?

How to make an API on php secure

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.

Security

PHP is a widely-used server-side scripting language especially suited for web development, powering tens of millions of sites from Facebook to personal WordPress blogs. PHP is often paired with the MySQL relational database, but includes support for most other mainstream databases. By utilizing different Server APIs, PHP can work on many different web servers as a server-side scripting language.

Web development includes all aspects of presenting content on intranets and the Internet, including delivery development, protocols, languages and standards, server software, browser clients, databases and multimedia generation.