09-02-2017, 03:07 PM
The problem is that even though they're my projects different people have different code on their servers. So, the pos is locally hosted and the registration system is on my remote server. The people who have the POS can look at the source code and would have access to the db creds. The API severely restricts what kind of queries they can make and who can make them.