+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Coders Lounge (https://hackforums.net/forumdisplay.php?fid=5)
+---- Thread: [Help] MySQL Database - Auth (/showthread.php?tid=5697967)
MySQL Database - Auth - CocoCoding - Aug 18, 2017
Hi all, I want to know how to connect a MySQL Database with a C# application. I would like to make a secure authentication for my product. Thanks - CocoCoding :)
* - Charger - Aug 18, 2017
Do NOT connect via your application.
Use a webserivce to communicate with the database.
* - Fire - Aug 20, 2017
(Aug 18, 2017 06:59 PM)Charger Wrote: Do NOT connect via your application.Are there any performance advantages to connecting via a web service?
Use a webserivce to communicate with the database.
What service would you recommend?
* - Charger - Aug 20, 2017
(Aug 20, 2017 05:33 AM)Jaeger Wrote: Are there any performance advantages to connecting via a web service?Your database details are not exposed to the end user nor are they vulnerable to a MITM attack.
What service would you recommend?
* - Fire - Aug 21, 2017
(Aug 20, 2017 02:48 PM)Charger Wrote: Your database details are not exposed to the end user nor are they vulnerable to a MITM attack.That's the primary reason, I asked for the performance aspect of it..
* - Charger - Aug 21, 2017
(Aug 21, 2017 05:50 AM)Jaeger Wrote: That's the primary reason, I asked for the performance aspect of it..
It's easier to manage the data in my opinion.
* - severos - Aug 21, 2017
Connecting to an online DB from client application is the worst idea ever, it's just like handing out your DB logins and telling people to screw it for you.
As charger said, create a web service that connects to the DB, that's more secure.
But, if you really have to connect from client, it's possible to create a DB user that has no query execution write or whatever other rights, except for executing some stored procedures that do the querying. still it's a very bad practice and should only be used in certain environments.