# Online Ordering System

**URL:** <https://community.glideapps.com/t/online-ordering-system/21754>\
**Category:** Project Showcase\
**Created:** [January 26, 2021, 1:10pm UTC](https://community.glideapps.com/t/online-ordering-system/21754 "2021-01-26T13:10:30Z")\
**Posts on this page:** 9\
**Page:** 3

<div class="post-metadata">

**Author:** ![Uzo](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/uzo/32/22639_2.png) [@Uzo](https://community.glideapps.com/u/Uzo)\
**Post date:** [February 3, 2021, 6:38am UTC](https://community.glideapps.com/t/online-ordering-system/21754/41 "2021-02-03T06:38:06Z")

</div>

i put row owner on user email, and all items disappear from App, so there is no way to protect users data if it is used by App

---

<div class="post-metadata">

**Author:** ![Drearystate](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/drearystate/32/49605_2.png) [@Drearystate](https://community.glideapps.com/u/Drearystate)\
**Post date:** [February 3, 2021, 11:26pm UTC](https://community.glideapps.com/t/online-ordering-system/21754/42 "2021-02-03T23:26:51Z")

</div>

Why are you digging through apps like that and telling people? If anyone of his customers complains about an issue with one of their cards on his app. Because of your post on here you would probably be liable.

---

<div class="post-metadata">

**Author:** ![Jeff\_Hager](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/jeff_hager/32/43_2.png) [@Jeff\_Hager](https://community.glideapps.com/u/Jeff_Hager)\
**Post date:** [February 3, 2021, 11:39pm UTC](https://community.glideapps.com/t/online-ordering-system/21754/43 "2021-02-03T23:39:47Z")

</div>

That’s why I don’t explain how I did it. I would hardly consider it “digging”. All I’m saying is that it’s really easy to obtain that information if you know how to do it and if somebody doesn’t take data security seriously. Would you want to be that customer? Would you want to be the app owner as the data processor that’s responsible for securing user’s data? Would you want your personal information or passwords stored in plain text for the world to see? They aren’t going to be looking at me because I didn’t advise anybody how to do it. They are going to be looking at the person who didn’t heed the advice or follow proper procedure. There are thousands of people out there that do this for sport and greed and it’s only a matter of time before they get hit. I’m doing it simply to educate. I don’t have any objections to what I did. There are security companies out there doing the exact same thing to try to make a buck.

Plus, I’m only “digging” if I see very obvious misuse of proper security, such as asking for a password using plain text. Most users would not know that their password is that obviously accessible. If they are using that same password elsewhere, that could be a serious risk to them. I don’t go around looking at the underlying data of most apps. In most cases, I have good faith that most people are following reasonable security procedures.

---

<div class="post-metadata">

**Author:** ![Jeff\_Hager](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/jeff_hager/32/43_2.png) [@Jeff\_Hager](https://community.glideapps.com/u/Jeff_Hager)\
**Post date:** [February 3, 2021, 11:44pm UTC](https://community.glideapps.com/t/online-ordering-system/21754/44 "2021-02-03T23:44:26Z")

</div>

@uzo Yes, if I expand each sheet, I could see all the data within it. For your particular situation, you would have to show and explain what exactly you are trying to do to share info between users and vendors. Ideally you would have a user sheet that’s protected by row owners. Your vendors would be in a separate sheet that is not protected by row owners. If you wanted your users to share data with a vendor, they can easily do that through email, whatapp, text, etc. If you need something between vendor and user, then maybe this would have to be another sheet with 2 row owner columns, one for vendor and one for user, so data in that sheet would be private between them. It’s all about structuring your data properly.

---

<div class="post-metadata">

**Author:** ![Drearystate](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/drearystate/32/49605_2.png) [@Drearystate](https://community.glideapps.com/u/Drearystate)\
**Post date:** [February 4, 2021, 12:28am UTC](https://community.glideapps.com/t/online-ordering-system/21754/45 "2021-02-04T00:28:05Z")

</div>

I’m not saying you are showing people how to do it. But you did just show the world that you had access to bank cards and even mentioned a bank. Liability. And you said you don’t go around looking at the underlying data of most apps, which does mean some apps and I have seen you post similar responses in the past. Just telling you…if something happens they will look to you.

---

<div class="post-metadata">

**Author:** ![Jeff\_Hager](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/jeff_hager/32/43_2.png) [@Jeff\_Hager](https://community.glideapps.com/u/Jeff_Hager)\
**Post date:** [February 4, 2021, 12:37am UTC](https://community.glideapps.com/t/online-ordering-system/21754/46 "2021-02-04T00:37:47Z")

</div>

Have at it. No regrets on my part. None of that data is kept in my possession or shared…plus I have no intention of using it maliciously. I don’t think anybody is going to fault me for providing advice and awareness.

It’s not like it’s a big secret either. It’s clearly stated in Glide’s security documentation.

 ![image](https://us1.discourse-cdn.com/flex002/uploads/glideapps/original/3X/1/a/1a4cb3628539ca2d36f810d03e767be3d1606b9e.png)

Also, that data was downloaded to my personal computer simply by me opening the url. Am I liable for possession at the point it was pushed into my own browser cache or simply by inspecting my own network traffic? Wouldn’t we all be liable at that point?

---

<div class="post-metadata">

**Author:** ![Drearystate](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/drearystate/32/49605_2.png) [@Drearystate](https://community.glideapps.com/u/Drearystate)\
**Post date:** [February 4, 2021, 2:54am UTC](https://community.glideapps.com/t/online-ordering-system/21754/47 "2021-02-04T02:54:43Z")

</div>

You missed the point, I was trying to help you not accuse you. Good luck.

---

<div class="post-metadata">

**Author:** ![yosefdc7](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/yosefdc7/32/20850_2.png) [@yosefdc7](https://community.glideapps.com/u/yosefdc7)\
**Post date:** [February 4, 2021, 4:54am UTC](https://community.glideapps.com/t/online-ordering-system/21754/48 "2021-02-04T04:54:52Z")

</div>

thanks for this. I am learning a lot.

---

<div class="post-metadata">

**Author:** ![Mns\_Glide](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/mns_glide/32/2514_2.png) [@Mns\_Glide](https://community.glideapps.com/u/Mns_Glide)\
**Post date:** [February 4, 2021, 7:40am UTC](https://community.glideapps.com/t/online-ordering-system/21754/49 "2021-02-04T07:40:53Z")

</div>

learning every day from all the highlights by you and all in this community platform. thanks a bunch!

[Previous page](https://community.glideapps.com/t/online-ordering-system/21754.md?page=2)
