Shulou(Shulou.com)06/01 Report--

Mssql and Mysql related security analysis (transfer) [@ more@] database is the basis of e-commerce, finance and ERP systems, and usually stores important business partner and customer information. The electronic data of most enterprises, organizations and government departments are kept in various databases, which they use to keep some personal data and hold sensitive financial data. But databases usually do not receive as much security attention as operating systems and networks. Data is the lifeblood of an enterprise and an organization, so it is very important to choose a secure database. Large websites generally use oracle or DB2, while most small and medium-sized websites use more flexible and compact mssql databases or mysql databases. So, under the same conditions, which is more secure, Microsoft's mssql or free mysql? I installed mssql and mysql by default on my machine with the administrator account to test their security under the same circumstances. My system configuration is as follows: the operating system Microsoft Windows 2000 Version5.0, with sp4,ftp service and iis service installed, supporting asp and php. There is only one administrator account in the system. The admin,guest account is not disabled.

one。 Internal security analysis of the system

The problem of access Control in 1.mysql Database

Mysql's access control is based on the mysql database, called the authorization table, which includes six tables, columns_priv,db,func,host,tables_priv and user. First use the desc user command to view the structure of the very important user table in order to query the contents, and now you can view his permission settings. Use the command

CODE: select host,user,password,delete_priv,update_priv,drop_priv from user

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.