Tips for Db SecurityDisclaimer : This post keeps in mind the web frontends and web applications based attacks on DB Servers in mind.
- Any Userid used for web application connectivity should be clipped to specific ip addresses that could be localhost in case of same server usage for Db and App server. If two separate servers are used then clip the user id (s) with the application server ip address / hostname. Keep a strick log of who access