MySQL Security Best Practices
Prepared, statements, (parameterized, queries) SQL, injection, ko, PREVENT, karte, HAIN — string, concatenation, se, queries, banaна, EK, MAJOR, security, RISK, hai.
SSL/TLS, encryption, se, MySQL, connections, ko, ENCRYPT, kiya, ja, sakta hai — data, "IN, TRANSIT" ko, EAVESDROPPING, se, protect, karta hai. bind-address, config, se, MySQL, ko, sirf, SPECIFIC, IP, addresses, se, ACCESSIBLE, banaya, ja, sakta hai.
// Application code mein, parameterized query (SQL injection SAFE):
const [rows] = await connection.execute(
"SELECT * FROM users WHERE email = ?",
[userEmail]
);
// NEVER: connection.query(`SELECT * FROM users WHERE email = '${userEmail}'`)- Prepared statements = SQL injection, se, bachne, ka, MAIN, tareeka
- SSL/TLS, encryption, se, connections, secure, ki, ja, sakti, hain
- root, user, applications, se, kabhi, directly, use, nahi, karna, chahiye
Production, mein, root, user, ko, sirf, localhost, se, hi, connect, hone, deना, chahiye — remote, root, access, disable, karna, EK, BASIC, hardening, step, hai (mysql_secure_installation, script, ISME, HELP, karta hai).
mysql_secure_installation
-- Interactive, script, jo, root, password, set, karta, hai,
-- remote, root, login, disable, karta, hai, anonymous, users, remove, karta, haigeneral_query_log, HAR, query, ko, LOG, karta hai (PERFORMANCE, overhead, ke, saath) — SECURITY, incidents, DEBUG, karne, ke, liye, TEMPORARILY, enable, kiya, ja, sakta hai, PRODUCTION, mein, HAMESHA, ON, nahi, rakha, jaata.