php - Nodejs, Socket.io, Redis, Laravel - security? -

i'm using laravel 5.1 backend , @ same time, have nodejs server running purely socket.io , 'news' table.

basically, every single time item added news table in mysql, laravel broadcasts event, caught socket.io on client , socket.io sends off ajax call server api retrieve news item.

i new node.js , first project using it. thinking using pusher instead, real-time updates, wanted try new , went setup.

so question is, how secure node.js server in scenario? runs simple server @ moment said, solely socket.io , nothing else. there security measures should take before app goes live?

if use socket.io , backend script in node dispatches socket (and doesn't receive data front end), shouldn't have worry about. dispatch clients have php session, , can use redis between php & node.