mssql和mysql的安全性分析（Security analysis of MSSQL and MySQL）.doc

mssql和mysql的安全性分析（Security analysis of MSSQL and MySQL） Security analysis of Mssql and Mysql Asp tutorial - secure encryption Databases are the foundation of e-commerce, finance, and ERP systems, and often maintain important business partners and Customer information. Most enterprises, organizations and government departments keep their electronic data in various databases Keep some personal data in these databases and have sensitive financial data. But databases are usually no image Operating systems and networks are highly valued for security. Data is the lifeblood of an enterprise, an organization, and therefore a choice A secure database is critical. Large sites generally use Oracle or DB2, while small and medium-sized websites are large Most use a more flexible, compact MSSQL database or MySQL database. Then, under the same conditions, micro Which is more secure, the soft MSSQL and the free MySQL? I use the administrator account on my machine, and MSSQL and MySQL are installed by default to measure in the same situation Try their safety. My system configuration is as follows: operating system Microsoft Windows 2000 Version5.0, SP4, FTP services, and IIS services are installed to support ASP and php. The system has only one administrator account, admin, guest Account is not disabled. I. internal security analysis of the system 1.mysql database authority control problem The permissions control of MySQL is based on the MySQL database, called the authorization table, which includes six tables Columns_priv, DB, func, host, tables_priv, and user. First use the desc user command to view non - The structure of the often important user table so that you can query the content, you can now view his permissions settings. Using commands select, host, user, password, delete_priv, update_priv, drop_priv, from, user; This command looks at several of the more dangerous permissions and shows the following: Mysql, select, host, user, password, delete_priv, update_priv, drop_priv,