Title: Server-side?
Last modified: June 5, 2018

---

# Server-side?

 *  Resolved [henrybobford](https://wordpress.org/support/users/henrybobford/)
 * (@henrybobford)
 * [8 years ago](https://wordpress.org/support/topic/server-side/)
 * Is this considered a server-side app? I am trying to integrate a menu from a 
   client-side javascript that pulls data from a published google spreadsheet onto
   our retail tv via Raspberry Pi.
 * Now I’m trying to make it so that when we update our spreadsheet, it updates 
   not only the tv menu, but our website.
 * Our Raspberry Pi developer said he doesn’t recommend using a client-side app 
   on our WordPress site as it would likely broadcast the key for accessing the 
   sheet?
 * Thoughts?

Viewing 4 replies - 1 through 4 (of 4 total)

 *  Plugin Author [Meitar](https://wordpress.org/support/users/meitar/)
 * (@meitar)
 * [8 years ago](https://wordpress.org/support/topic/server-side/#post-10367108)
 * > Thoughts?
 * Fire your developer.
 * There are no access keys or credentials utilized by this plugin for Google Sheets.
 *  [Dustin Tantum](https://wordpress.org/support/users/tantumonium/)
 * (@tantumonium)
 * [8 years ago](https://wordpress.org/support/topic/server-side/#post-10367413)
 * > Our Raspberry Pi developer said he doesn’t recommend using a client-side app
   > on our WordPress site as it would likely broadcast the key for accessing the
   > sheet?
 * Meitar is accurate in saying “_There are no access keys or credentials utilized
   by this plugin_“, as the documentation states… the Google Sheet must be **publicly
   shared** in order to be used by the IGSV plug-in.
 * It’s worth noting, that your “GOOGLESHEETKEY” (e.g. [https://docs.google.com/spreadsheets/d/GOOGLESHEETKEY/htmlview](https://docs.google.com/spreadsheets/d/GOOGLESHEETKEY/htmlview))
   is used as the IGSV’s table ID (e.g. <table id=”GOOGLESHEETKEY”> ), which is 
   obviously visible to anyone via the browser source code.
 * In order to implement a tiny bit of “security through obfuscation”… I slightly
   modified the installed plug-in’s code as follows:
 * **IMPORTANT NOTE**: Make this change at your own risk, as it will make troubleshooting
   more difficult and should only be done if/once you’re certain your project is
   working as intended.
 * FIND:
    `$html = '<table id="' . esc_attr($id) . '"';`
 * REPLACE:
    `$html = '<table id="' . esc_attr( str_shuffle( $id ) ) . '"';`
 *  Plugin Author [Meitar](https://wordpress.org/support/users/meitar/)
 * (@meitar)
 * [8 years ago](https://wordpress.org/support/topic/server-side/#post-10367697)
 * >     ```
   >     $html = '<table id="' . esc_attr( str_shuffle( $id ) ) . '"';
   >     ```
   > 
 * This will break any CSS and JavaScript selecting or targeting the table HTML.
   If you are going to do this, at least use `hash( 'sha256', $id )`, not `str_shuffle()`
   so that your output is always the same.
 *  [Dustin Tantum](https://wordpress.org/support/users/tantumonium/)
 * (@tantumonium)
 * [8 years ago](https://wordpress.org/support/topic/server-side/#post-10367746)
 * > This will break any CSS and JavaScript selecting or targeting the table HTML.
 * In my use cases, that hasn’t mattered, but it’s a very good & important point…
   as is your comment about hashing the `$id` instead. Thanks!

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Server-side?’ is closed to new replies.

 * ![](https://s.w.org/plugins/geopattern-icon/inline-google-spreadsheet-viewer.
   svg)
 * [Inline Google Spreadsheet Viewer](https://wordpress.org/plugins/inline-google-spreadsheet-viewer/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/inline-google-spreadsheet-viewer/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/inline-google-spreadsheet-viewer/)
 * [Active Topics](https://wordpress.org/support/plugin/inline-google-spreadsheet-viewer/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/inline-google-spreadsheet-viewer/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/inline-google-spreadsheet-viewer/reviews/)

 * 4 replies
 * 3 participants
 * Last reply from: [Dustin Tantum](https://wordpress.org/support/users/tantumonium/)
 * Last activity: [8 years ago](https://wordpress.org/support/topic/server-side/#post-10367746)
 * Status: resolved