#storing sensitive data in app files

8 messages · Page 1 of 1 (latest)

ivory knot
#

Hey guys I have question, let's say someone is making a course app, and the courses are just text and not videos.
Are there any security risks involved if you decide to store the courses in markdown files inside the app files and just use the fs module to retrieve them if the user has paid for them? Or is it better and safer to get them from a cms or just any database?
Ps: using pages router if that makes any difference.

sleek finchBOT
#
Post created!

🔎 This post has been indexed in our web forum and will be seen by search engines so other users can find it outside Discord

🕵️ Your user profile is private by default and won't be visible to users outside Discord, if you want to be visible in the web forum you can add the "Public Profile" role in id:customize

✅ You can mark a message as the answer for your post with Right click -> Apps -> Mark Solution
(if you don't see the option, try refreshing Discord with Ctrl + R)

grave talon
#

they are safe, if you only render them serverside. If you send specific parts to the client, these parts are exposed to the client @ivory knot

ivory knot
#

I just verify if the user has access to that particular lesson (md file), if they do I send them the file content other wise i just redirect them somewhere (inside getserversideprops)

grave talon
grave talon
#

@ivory knot fixed?

ivory knot
grave talon