I am looking for signposting help to secure my API keys when accessing a database over REST API from JavaScript on a webpage. I have read that in order to secure the API key I need to create a wrapper in PHP that will basically insert the API key into the request to allow the JavaScript on webpage to access the database.
Question:
- Do I understand the concept correctly - re API keys and PHP?
- Where can I get more info on the wrapper, maybe a tut or something?