I read something when I first started in online programming that I think
fits this situation.  Basically, the only way to protect your data, from
being used in unauthorized ways, is to not put it online.  As soon as it
is opened up to the public, it will be fair game for everyone.

That said, to help protect your database from being compromised there
are a couple of best practices to follow.

1. Store your username/password outside of the website root - not
directly in the PHP script.
2. Create a MySQL user that only has SELECT privileges - Don't use the
root password to access the db.

I'm sure more experienced users can give you more thoughts on this.  It
seems that if the data is that valuable and/or sensitive a
membership-only option should be explored.  Possibly one with very
strict Terms of Use with stiff, enforceable penalties for breaking those
terms.  Just a thought.
 

-----Original Message-----
From: [email protected] [mailto:[EMAIL PROTECTED] On
Behalf Of J Siegel
Sent: Friday, June 30, 2006 11:19 AM
To: [email protected]
Subject: [php_mysql] Re: Protecting my database...

> The first thing that comes to mind it formating your output with
PHP 
> then rasterizing it into a JPEG to be displayed or output a PDF
that 
> prevents printing or copying.

That's a pretty good idea although it limits what I can do with the data
myself (like allowing the user to sort it, calculate with it, etc).

Having a reliable referer reference would do the trick...

...Jeff



 


------------------------ Yahoo! Groups Sponsor --------------------~--> 
Great things are happening at Yahoo! Groups.  See the new email design.
http://us.click.yahoo.com/TISQkA/hOaOAA/yQLSAA/CefplB/TM
--------------------------------------------------------------------~-> 

The php_mysql group is dedicated to learn more about the PHP/MySQL web database 
possibilities through group learning.  
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/php_mysql/

<*> To unsubscribe from this group, send an email to:
    [EMAIL PROTECTED]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/
 


Reply via email to