How to keep database safe

Discussion in 'Databases' started by pankajdeoria, May 2, 2010.

  1. #1
    How to keep database safe for a smf forum website?
     
    pankajdeoria, May 2, 2010 IP
  2. sawz

    sawz Prominent Member

    Messages:
    8,225
    Likes Received:
    808
    Best Answers:
    0
    Trophy Points:
    360
    #2
    not sure i understand what your asking. the smf database like all other databases requires a user name and password to access it. yours is no different. are you worried about someone getting into it?
     
    sawz, May 2, 2010 IP
  3. pankajdeoria

    pankajdeoria Banned

    Messages:
    314
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    125
    #3
    Yes, Now a days, I am reading posts on dp that my db is hacked ... what to doo.........
    So, Is their any way to secure our databases from hackers?
     
    pankajdeoria, May 2, 2010 IP
  4. extremephp

    extremephp Peon

    Messages:
    1,290
    Likes Received:
    32
    Best Answers:
    0
    Trophy Points:
    0
    #4
    Wel, Pankaj, Hackers usually rob or destruct the database by getting SSH access or By getting your Logins to your hosting.So the simples way of protection for your Databas eis to keep your computer clean from key loggers and spywares which robs your passwords.

    Keep that password changing frequently so that it would make the thing more secure. Also take Everyday Backups for your site and database if you have enough space in your Hosting. OR if not, have backup, download it to your computer and remove it from your Hosting. Simple....
     
    extremephp, May 3, 2010 IP
  5. Rory M

    Rory M Peon

    Messages:
    1,020
    Likes Received:
    37
    Best Answers:
    0
    Trophy Points:
    0
    #5
    If you're using 3rd party modifications, check them to ensure that user input is correctly sanitized (mysql_real_escape_string())
     
    Rory M, May 3, 2010 IP
  6. jestep

    jestep Prominent Member

    Messages:
    3,659
    Likes Received:
    215
    Best Answers:
    19
    Trophy Points:
    330
    #6
    Access is almost always made via the application and not ssh or the database directly. When a security hole is found in a piece of software, it is often quickly exploited. Best way to keep everything secure is to always upgrade the software when new versions are published, use strong passwords for everything (like: %4D275na^GhFvtJ7), and don't do any custom coding unless you can do it securely.

    When someone says their database is hacked, it is just the effect of the hacker breaking the site. It could be sql injection or another attack designed to help the attacker gain administrative access to the database, or other parts of the site. Because most php scripts run as nobody or as a limited user, it's very difficult for someone to gain root or ssh access via a php script. However, many people grant far excessive permissions to the database user, so the attacker can get access to the database and then wreak havoc on it. They may also be able to get ftp access via attacking. In any case, SSH access is very difficult to gain unless there are serious security vulnerabilities in the application and the way the server itself is configured.
     
    jestep, May 3, 2010 IP
  7. itsupportservice

    itsupportservice Peon

    Messages:
    93
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #7
    I got great information regarding how to avoid virus from database.... thanks for sharing these informative information....!!
     
    itsupportservice, May 20, 2010 IP
  8. rv12may

    rv12may Peon

    Messages:
    292
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #8
    Keep your system free from virus its a best way to prevent your database. and if you still get effect from it then no need to worry database recovery can prevent your lost data.
     
    rv12may, May 24, 2010 IP