title: Securing Android Web Service
body: <p>I am developing an Android App that makes request to my web service made in PHP. The way I get my data from the Android App is by passing a URL behind the code statically. This URL being in the code is not visible to the user. Is there any chance that my URL be revealed to the user and potentially allow that user to hack into my web service?</p>
  
  <p>I've came into a solution here at StackOverflow where it was mentioned that I should use the String Resource to save my URL statically. But I've also came accross a question here that says that Resources on Android can be opened in File Manager if rooted.</p>
  
  <p>If anyone could give me a tip to start on:</p>
  
  <ol>
  <li><p>Calling a function inside PHP through a web service.</p>
  
  <p>public function getStudents() {
      //Code for getting student JSON
  }</p>
  
  <p>call function like <a href="http://mysite.com/getStudents()" rel="nofollow">http://mysite.com/getStudents()</a></p></li>
  <li><p>Hide the URL for calling the web service in Android.</p></li>
  </ol>