title: Meteor JS - Collections (mongodb) can be changed by any visitor (Not secure)
body: <p>I am using the Meteor JS node framework for a project I am working on.</p>
  
  <p>I noticed that anyone visiting my website can simply enter a similar command into the javascript console in their browser and edit my database.</p>
  
  <pre><code>MyCollection.insert({name: 'I am a hacker', message: 'hahaha'});
  </code></pre>
  
  <p>Is there any way to stop users from being able to do this?</p>
  
  <p>This is really not secure, all they need to do is find the name of the Collection and they can do anything they want.</p>
  
  <p>How can I fix this problem?</p>
  
  <p>Should I use a different framework, is Meteor JS not ideal for a large-scale project?</p>
  
  <p>Thanks,</p>
  
  <p>Jonathan.</p>