Payment Service

[JeffLemon]

When a user buys something from my app, I set a flag in my database saying that the product has been purchased and it unlocks content in my app.

So for sku _myprd_0001 I set purchased = 1

I was wondering, is this easy for a user to hack, could they just open my database and set published to 1 in all my products?

What is the recomended way to deal with this and piracy?

Thanks

[gbeukeboom · Accepted solution]

Each app gets its own sandbox directory where no other app nor the user can access. So long as you store your DB in this directory and not one of the shared directories (Videos, Camera etc) you should be good