database-security

Is it acceptable to leave a database (Cloud Firestore) unsecured when no site login is required?

由 不打扰是莪最后的温柔 提交于 2019-12-01 20:29:19
问题 I'm building a game with Angular and (for the first time ever) I'm trying to add a high score table. I have set up a Firebase account and got a Firestore (Beta) database working and hooked up. I want a very simple high score system. Users will not be required to log in or create an account, you simply turn up, play and then, if you achieve a high score, enter your name and it is recorded and displayed in the table. So my question is - in a situation where no login is required and only basic

Namespaces for Multi tenancy in Cloud Firestore

由 十年热恋 提交于 2019-12-01 18:03:51
问题 How do we set a different database / namespace in Firestore? This would be helpful in building multi-tenancy SaaS products. 回答1: Based on the recent announcements by google, it looks this will become a thing: Cloud Firestore, currently available in beta, is the next generation of Cloud Datastore, and offers compatibility with the Datastore API and existing client libraries. With the newly introduced Datastore mode on Cloud Firestore, you don’t need to make any changes to your existing

Namespaces for Multi tenancy in Cloud Firestore

由 爷，独闯天下 提交于 2019-12-01 17:51:40
How do we set a different database / namespace in Firestore? This would be helpful in building multi-tenancy SaaS products. Based on the recent announcements by google, it looks this will become a thing: Cloud Firestore, currently available in beta, is the next generation of Cloud Datastore, and offers compatibility with the Datastore API and existing client libraries. With the newly introduced Datastore mode on Cloud Firestore, you don’t need to make any changes to your existing Datastore apps to take advantage of the added benefits of Cloud Firestore. After general availability of Cloud

Preventing fraudulent submission to a scoreboard

由 陌路散爱 提交于 2019-12-01 09:56:29
问题 I'm working on the backend for a Flash game and I need to secure the data going into the scoreboard. The game is going to be hosted on many sites in a banner ad, the user will play the game in the advert then click through to the main site to save their details. At the moment I am thinking along the lines of this User plays the game and clicks to submit their score In the background, the banner sends the score and the originating domain to a script on the main site. The script check the

How can I use transparent data encryption with MySQL?

由 笑着哭i 提交于 2019-12-01 04:18:09
I want to enable Transparent Data encryption (TDE) on MySQL. I don't mind if the entire db is encrypted (as opposed to a few columns or rows or tables). I am using this for a study, so I am looking for something that is open and free. I found zNcrypt but it's a commercial product. They are essentially using eCryptfs which is open-source, but couldn't find a way to rightly configure it for MySQL. Any pointers on using eCryptfs with MySQL or any other solution for enabling TDE with MySQL would be very helpful. Thanks! Ildefonso Camargo I see this question is relatively old, but just in case:

How can I use transparent data encryption with MySQL?

由 倾然丶 夕夏残阳落幕 提交于 2019-12-01 02:23:15
问题 I want to enable Transparent Data encryption (TDE) on MySQL. I don't mind if the entire db is encrypted (as opposed to a few columns or rows or tables). I am using this for a study, so I am looking for something that is open and free. I found zNcrypt but it's a commercial product. They are essentially using eCryptfs which is open-source, but couldn't find a way to rightly configure it for MySQL. Any pointers on using eCryptfs with MySQL or any other solution for enabling TDE with MySQL would

SQL Server Permissions on Stored Procs with dynamic SQL

由 十年热恋 提交于 2019-11-27 03:20:44
问题 I have a database which has an application role. The role members all belong to a group in Active Directory. Instead of giving the role permissions to select from the tables I have given the role execute permissions on all of the stored procedures that it needs to call. This works fine except for one of my stored procedures which is building up some dynamic SQL and calling sp_executesql. The dynamic sql looks sort of like this: SET @SQL = N' SELECT * FROM dbo.uvView1 INNER JOIN uvView2 ON

Create new user in MySQL and give it full access to one database

由 非 Y 不嫁゛ 提交于 2019-11-27 02:20:01
I want to create a new user in MySQL and give it full access only to one database, say dbTest , that I create with a command like create database dbTest; . What would be the MySQL commands to do that? Dan McGrath Try this to create the user: CREATE USER 'user'@'hostname'; Try this to give it access to the database dbTest : GRANT ALL PRIVILEGES ON dbTest.* To 'user'@'hostname' IDENTIFIED BY 'password'; If you are running the code/site accessing MySQL on the same machine, hostname would be localhost. Now, the break down. GRANT - This is the command used to create users and grant rights to

Create new user in MySQL and give it full access to one database

由 蹲街弑〆低调 提交于 2019-11-26 10:04:42
问题 I want to create a new user in MySQL and give it full access only to one database, say dbTest , that I create with a command like create database dbTest; . What would be the MySQL commands to do that? 回答1: Try this to create the user: CREATE USER 'user'@'hostname'; Try this to give it access to the database dbTest : GRANT ALL PRIVILEGES ON dbTest.* To 'user'@'hostname' IDENTIFIED BY 'password'; If you are running the code/site accessing MySQL on the same machine, hostname would be localhost.

What is the difference between Integrated Security = True and Integrated Security = SSPI?

由 一世执手 提交于 2019-11-25 23:24:25
问题 I have two apps that use Integrated Security. One assigns Integrated Security = true in the connection string, and the other sets Integrated Security = SSPI . What is the difference between SSPI and true in the context of Integrated Security? 回答1: According to Microsoft they are the same thing. When false , User ID and Password are specified in the connection. When true, the current Windows account credentials are used for authentication. Recognized values are true , false , yes , no , and
订阅 database-security