Databases
StackOverflow2013
Postsdbo
PO
 

Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>Yes, breaches do occur by not protecting the connection to your database. This is a network secuirty question more so than an Application secuirty question. Thus this answer is entirely dependent on your network topography. </p> <p>If a segment of your network maybe accessible by an attacker, then you must protect yourself with cryptography. For instance you have a malicious individual who has compromised a machine on your network, then they can conduct an <a href="http://en.wikipedia.org/wiki/ARP_spoofing" rel="noreferrer">ARP Spoofing</a> attack to "Sniff" or even MITM devices on a switched network. This could be used to see all data that flows in and out of your database, or modify the database's response to a specific query (like a login!). If the network connection to your database is a single rj45 twisted connection to your httpd server all residing inside a locked cabinet, then you don't have to worry about a hacker sniffing this. But if your httpd is on a wifi network and then connecting to a database in China, then you might want to think about encryption. </p> <p>You should connect to your MySQL database using <a href="http://dev.mysql.com/doc/refman/5.0/en/secure-basics.html" rel="noreferrer">MySQL's built-in SSL ability</a>. This insures that all data transferred is highly protected. You should create self-signed x509 certificates and hard code them. This is free, and you don't need a CA like Verisign for this. If there is a certificate exception then there is a MITM and thus this stops you from spilling the password. </p> <p>Another option is a <a href="http://openvpn.net/" rel="noreferrer">VPN</a>, and this is better suited if you have multiple daemons that require secure point to point connections. </p>
    singulars
    1. This table or related slice is empty.
    1. POMySQL connection and security
      singulars
      1. PTQuestion
    1. PTAnswer
    1. This table or related slice is empty.
    1. USrook
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. POMySQL connection and security
      singulars
      1. PTQuestion
    1. This table or related slice is empty.
    1. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTUpMod
    2. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTUpMod
    3. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTAcceptedByOriginator
    1. COwow... I have really little experience in servers and such... I will be renting a dedicated server from heartinternet for my latest project. the 99% of the site will reside there, the small percent ( 1 page ) will be on a different server ( a reseller account ) which will be used only to display a users profile page ( the profile url is a wildcard subdomain which the domain is shorter than the previous - only reason why i asked ).
      singulars
      1. PO
      1. USPhil Jackson
    2. COWould it be wise to keep both domains on the dedicated server?
      singulars
      1. PO
      1. USPhil Jackson
    3. COFor a simplicity and secuirty I would host the reseller page on the same server. If you need to share user account information between servers I would look into oAuth/OpenID or perhaps a custom SOAP service, depending on your needs.
      singulars
      1. PO
      1. USrook
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload