Hello everybody, i want to know if someone know my server ip and database information username and password he can modify anything without login at my server? i mean editing the database
answer me fast please.thanks
Printable View
Hello everybody, i want to know if someone know my server ip and database information username and password he can modify anything without login at my server? i mean editing the database
answer me fast please.thanks
yes they can edit your db
1) change sql id/pass (and use comles id/password... and ofc NEVER SHARE IT)
2) use sql only on local mode ( block incoming connections on sql port - 1433)
3) secure your php scripts (no idea how.. i dont know php)