I have made a simple Mobile App to update a wordpress site.
It starts with a login (to the app) and then with forms, sends data via POST method to a PHP file that then uses
add_post_meta, etc to create the new post.
My concern is that this PHP page is not secure. If anybody got hold of the filename, they could insert anything to my site. My PHP file uses
include ("wp-load.php"); and then does its work, but I feel there is something I am missing as far as user verification that I can't figure out how to do via searching online. Any pointers to where I can learn about this would be appreciated.
I have tried to deconstruct the Wordpress Mobile App, but it is a little too complex for me.