What Should I Know About Keeping My Website’s Backend Calculations Secure?

Since you’re starting out, don’t stress too much! Using standard frameworks like Flask, FastAPI, or Node.js should keep you safe. Just make sure to look into authentication libraries to limit access to your backend API. And remember, only the results should be visible; the actual calculations should stay private.

If someone compromises your server, they can access your code. No system is impenetrable, not even those managed by highly funded entities. To mitigate risks, make use of security features like hard-to-guess passwords and two-factor authentication. Also, consider keeping sensitive formulas in a Google Sheet with limited access instead of running everything on your server.

It really depends on how serious the breach is. Hacking can range from a simple content injection, which might compromise other users, to full read access to your database through SQL Injection, or even complete control of your server. If they gain control of your server, they’d have access to everything running on it, including your calculations.