MySQL 8 Administrator???s Guide

Security guidelines for client programming

Don't trust any data entered by the application user, because there is the possibility that the user has entered a drop or delete statement for the MySQL database. So, there is always the risk of security leaks and data loss. As an administrator of a MySQL database, the following checklist should be followed:

• The size of the data must be checked before passing it to MySQL 8.
• To make MySQL 8 more restrictive, enable the strict MySQL mode.
• For numeric fields, enter characters, special characters, and spaces instead of numeric itself. Change field values to their original forms by your application before sending them to the MySQL 8 server.
• Use two different users for application connection to the database ...