# Need toconnect to MySQL
**URL:** https://community.weweb.io/t/need-toconnect-to-mysql/7276
**Category:** Ask us anything
**Tags:** design
**Created:** [February 26, 2024, 10:05pm UTC](https://community.weweb.io/t/need-toconnect-to-mysql/7276 "2024-02-26T22:05:08Z")
**Posts on this page:** 9
**Page:** 1
### Author:  [@Mage](https://community.weweb.io/u/Mage)
#### Post date: [February 26, 2024, 10:05pm UTC](https://community.weweb.io/t/need-toconnect-to-mysql/7276/1 "2024-02-26T22:05:08Z")
I am very new to WeWeb and looking to build an SaaS usin MySQL as the database. The notes on the SQL API suggest it is not secure enough for a web app and so I am asking for recommendations.
---
### Author:  [@Broberto](https://community.weweb.io/u/Broberto)
#### Post date: [February 27, 2024, 11:04am UTC](https://community.weweb.io/t/need-toconnect-to-mysql/7276/2 "2024-02-27T11:04:27Z")
I’d suggest using a middle layer (API) such as Fastgen or others as by executing SQL client-side, unless it’s a closed app (not exactly the definition of SaaS) you’re exposing yourself to SQL injection and vulnerabilites. If you like SQL, you might love Supabase, which is built on PostgreSQL and they incorporate it pretty well into everything.
---
### Author:  [@Mage](https://community.weweb.io/u/Mage)
#### Post date: [February 27, 2024, 1:49pm UTC](https://community.weweb.io/t/need-toconnect-to-mysql/7276/3 "2024-02-27T13:49:27Z")
Thanx Broberto.
I took a quick look at Supabase and this is my understanding of what they are doing. They are hosting PostgreSQL with a the API layer that does what your say on the SQL end and there is a Supabase plugin on the WeWeb side so the connection should be simpler & more secure. Is this correct?
---
### Author:  [@Broberto](https://community.weweb.io/u/Broberto)
#### Post date: [February 27, 2024, 1:53pm UTC](https://community.weweb.io/t/need-toconnect-to-mysql/7276/4 "2024-02-27T13:53:51Z")
Yes, and they also provide all the other services like Auth and Storage 🙂
---
### Author:  [@Mage](https://community.weweb.io/u/Mage)
#### Post date: [February 27, 2024, 2:12pm UTC](https://community.weweb.io/t/need-toconnect-to-mysql/7276/5 "2024-02-27T14:12:19Z")
Do you know if the WeWeb plugin for Supabase, communicates directly to use the Auth?
---
### Author:  [@Broberto](https://community.weweb.io/u/Broberto)
#### Post date: [February 27, 2024, 3:05pm UTC](https://community.weweb.io/t/need-toconnect-to-mysql/7276/6 "2024-02-27T15:05:58Z")
Yes, it authenticates every request you send and then it’s up to Supabase to decide what to do with it.
---
### Author:  [@Mage](https://community.weweb.io/u/Mage)
#### Post date: [February 27, 2024, 3:15pm UTC](https://community.weweb.io/t/need-toconnect-to-mysql/7276/7 "2024-02-27T15:15:15Z")
I will test this out. It looks like Supabase can be self-hosted too.
---
### Author:  [@Mage](https://community.weweb.io/u/Mage)
#### Post date: [February 28, 2024, 10:03pm UTC](https://community.weweb.io/t/need-toconnect-to-mysql/7276/8 "2024-02-28T22:03:16Z")
I am told by my web server expert (who hosts the SQL I wan to use) that is we turn on SSL there should be no security issues using the WeWeb SQL plugin.
---
### Author:  [@dorilama](https://community.weweb.io/u/dorilama)
#### Post date: [February 28, 2024, 10:10pm UTC](https://community.weweb.io/t/need-toconnect-to-mysql/7276/9 "2024-02-28T22:10:28Z")
> **[Exploits of a Mom](https://xkcd.com/327/)**
>
> Her daughter is named Help I'm trapped in a driver's license factory.