Connecting to Database

You may want to establish the connections over SSL to encrypt client/server communications for increased security, or you can use ssh to encrypt the network connection between clients and the database server. If either of these is used, then monitoring your traffic and gaining information about your database will be difficult for a would-be attacker.

Code Examples / Notes » security.database.connection

m zijlstra

There is no need to run your db on vmware... If they're on the same machine the connection always goes through the local loopback device thus never touching the actual network. This is true both when the DB host is specified as 'localhost' or '127.0.0.1' and if the machine's actual host name or outside network address is used (in which case the OS will/should recognise that it's actually a local connection and uses the loopback)

06-oct-2005 11:20

Obviously, this does not apply if PHP and the DBMS are running on the same machine.

jakub dot lasinski

Even if webserver and DBMS are on the same phisical machine one can separate networks by setting database in virtual server inside the main system (using for example VMware solutions).

aastaneh

Another solution to protect your database is to have a seperate backend network exclusively used for database traffic. Your webserver(s) would have two interface cards: one facing the world, one facing the internal database network. This way- there's no chance of intercepting database traffic from the outside.

Change Language

Designing Databases
Connecting to Database
Encrypted Storage Model
SQL Injection