Re: Making the DB secure

Együd Csaba <csegyud@vnet.hu> writes:

> Hi,
> we plan to make available our database from the internet (direct tcp/ip
> based connections). We want to make it as secure as possible. There are a
> few users who could access the database, but we want to block any other
> users to access.

Honestly, I wouldn't do it this way unless I had no alternative.  I'd
build a middle-tier application layer that takes requests from the
clients (via raw sockets, XML-RPC or whatever) and then translates
those calls into SQL queries.  It just gives you a lot more control
over what queries hit your system.

-Doug