1463 comments found.
I received a very troubling email from Firebase stating that my database is insecure because of your plugin. Can you please answer to this:
“We’ve detected the following issue(s) with your security rules: any logged-in user can read your entire database any logged-in user can write to your entire database
Without strong security rules, anyone who has the address of your database can read / write to it, leaving your data vulnerable to attackers stealing, modifying, or deleting data as well as creating costly operations.”
This is alarming.
Dear jgliesman,
Thank you for getting in touch with Screets.
We are aware of this warning and working on it for further updates. You are safe as long as you have updated Database Security Rules as LC plugin asked you.
Please ensure that you have copy/pasted that code below into Firebase Dashboard > Database > Real-time database > Rules.
{
"rules": {
".read": "auth != null",
".write": "auth != null",
"operators": {
".read": true,
".write": "auth.isOperator === true",
".indexOn": [
"lastOnline"
]
},
"onlineOps": {
".read": true,
".write": "auth.isOperator === true"
},
"chats": {
".indexOn": [
"archived"
]
},
"users": {
".indexOn": [
"lastSeen"
]
}
}
}
For now, you don’t need to do anything else until LC plugin asks you again to update your security rules with the new ones.
If you have any further questions or concerns, let us know.
Best, Screets.
I use WC Vendors & have 15 vendors selling their products, can a customer chat with particular vendor on their shopping page?
Is there a way to connect this on your phone so messages come on your phone and can respond that way?
This item was featured on CodeCanyon
Elite Author
Contact the Envato Market Help Team
