title: Android web service, REST or KSOAP2 or get/post
body: <p>As of now, if I have to store something from Android to the server, I make an HTTP request of a <code>GET</code> URL, with data in the form of parameter values. On the server side, I use PHP to extract the parameter values and store them in database.</p>
  
  <p>Similarly, if I want to get something from the server to Android, I post a JSON string on the webpage using PHP. Then I read it in Android using HTTP request, convert the string to JSON and then use the data.</p>
  
  <p>This method of PHP-MySQL-Android-JSON is very easy but not secure. Suppose I want to store the score of player from my game in Android to the server's database, it is easy to execute some URL like <code>www.example.com/save_score.php?player_id=123&amp;score=999</code> from Android. But anyone can update his score if he comes to know the php file name and names of parameters, by simply typing this URL in a browser.</p>
  
  <p>So what is the correct method of interacting with a server (my server supports PHP but not Java)?</p>
  
  <p>I have heard about RESTful and KSOAP2, but know nothing about them. Can you please explain them a bit in lay man language (reading the proper definitions didn't help me)? What are these used for?</p>
  
  <p>What is the best way to send score to the server? Any tutorial link would be great.</p>
  
  <p>Thanks.</p>
  
  <p><strong>Edit 1</strong>:
  I don't use proguard to obfuscate my code for several reasons. So anyone can reverse engineer the apk, look into the code, find the URL to update the score, write his own POST method and update his score. How can I stop this from happening?</p>