Parse 本地数据库如何存储其数据? [英] How does the Parse Local Database store its data?

问题描述

是否使用核心数据?

数据是否以任何方式加密?有没有办法让用户很容易地恶意修改它?

Is the data encrypted in any way? Is there a way a user could maliciously modify it easily?

自从 LDB 被宣布用于 iOS 以来，我一直试图寻找这个答案，除了它就像我们的 android 实现"之外，没有找到任何关于此的信息.如果这些信息以明文形式存储，我无法在其中存储敏感信息，这就是我想知道的原因.

I have been trying to look for this answer since LDB was announced for iOS, and have not found any information regarding this other than 'it is just like our android implementation'. If this information is stored in plaintext I cannot store sensitive information in it, which is why I would like to know.

推荐答案

我刚刚创建了一个使用本地数据库的应用程序，这是我找到的内容.

I've just created an app that uses the local database, and here's what I've found.

在/Library/Private Documents/Parse 中有一个名为ParseOfflineStore 的文件.这是一个sqlite数据库.里面有 2 个相关表(ParseObjects 和 Dependencies)，固定对象存储在 ParseObjects 内.

Inside <app sandbox directory>/Library/Private Documents/Parse there is a file called ParseOfflineStore. This is a sqlite database. There are 2 relevant tables inside (ParseObjects and Dependencies), and pinned objects are stored inside ParseObjects.

回答您的问题:

1) 不，它不使用 CoreData，但它是 sqlite(与 CoreData 相同的数据库后备存储).

1) No, it does not use CoreData, but it is sqlite (the same db backing store as CoreData).

2) 不，它没有加密.它以明文形式存储在 ParseObjects 表中，在 json 列中作为明文 json.

2) No, it is not encrypted. It's in the clear, stored in the ParseObjects table, in the json column as cleartext json.

对于可以将 iExplorer 连接到应用程序以下载、更改和上传本地数据库的任何人来说，这将是相对微不足道的.但是，如果您有一个可以做到这一点的用户，他们很可能无论如何都可以将您的应用程序代理给 Charles ;-)

It would be relatively trivial for anyone who can hook up iExplorer to the app to download, change, and upload the local database. However, if you have a user who can do that, it's likely they could proxy your app with Charles anyway ;-)

这篇关于Parse 本地数据库如何存储其数据?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！