Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations biv343 on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

MySQL and security problem

Status
Not open for further replies.

mirkado227

Programmer
May 28, 2005
12
TR
Hallo everybody

Since more than 10 years I am working with Vfp. Mostly with his native database, sometimes with a local MySQL server.
In my current project the MySQL server is in a datacenter where users, who are running my program, are allowed to access the database from internet.

- Because I use SQLSTRINGCONNECT to connect to the MySQL Server, a user, who are sniffing his own datastream, can easely find out the username und password. And than there is no facility to detain him to corrupt the database.

- Because I have to share the MySQL server with other customers of the ISP, I am not able to use GRANT and REVOKE to limit the rights of the user.

(With PHP there is no such problem, because php connects with localhost to the server and username und password are stored in a php-file, which is not accessable for the user.)

A partial solution would be to install a separate linux-mysql server (co-location). Then I would own the root rights and could use GRANT und REVOKE. But this is at the moment not possible.

Any solution for my problem? Thanks in advance!

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top