Member Avatar for kishou

Is it possible for someone to hack into my database/table? if so should i name my table/database: database 5465464577688960985047834?

  • 4 Contributors
  • 6 Replies
  • 88 Views
  • 14 Hours Discussion Span
  • Latest Post Latest Post by azalia

Dani AI

Generated

Renaming or obfuscating database and table names is not a real security measure. As pointed out, attackers exploit vulnerabilities in the application or steal credentials — not guess object names. and raised hashing/encoding ideas; those only make administration harder and do not stop SQL injection, compromised accounts, or a breached server.

Fix the attack surface instead. Use parameterized queries / prepared statements to prevent injection (see OWASP SQL Injection Prevention Cheat Sheet) [https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html]. A minimal PDO example:

$stmt = $pdo->prepare("SELECT * FROM users WHERE email = ?");
$stmt->execute([$email]);

Apply least privilege: create a DB user that has only the permissions the application needs. Keep credentials out of the webroot, use strict file permissions or environment-based secrets, and never commit secrets to source control. Run the MySQL secure setup and restrict remote access as recommended in official MySQL security guidance [https://dev.mysql.com/doc/refman/8.0/en/security.html].

Do not use weak hashing for passwords or sensitive data. Use modern password hashing (bcrypt/argon2) and libraries such as PHP's password_hash when applicable; see OWASP Password Storage and the PHP manual for details [https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html] [https://www.php.net/manual/en/function.password-hash.php]. In short: stop trying to hide table names and start closing the real holes.

Recommended Answers

All 6 Replies

Member Avatar for nav33n

How will it make any difference ? If someone hacks into your database, how will changing its name makes it 'unhackable' ? The hacker will access/delete the tables with the loopholes in your script. :)

Member Avatar for kishou

How will it make any difference ? If someone hacks into your database, how will changing its name makes it 'unhackable' ? The hacker will access/delete the tables with the loopholes in your script. :)

oh i mean using md5().

Member Avatar for vssp

using encode ,dedcode function also help you

Member Avatar for kishou

using encode ,dedcode function also help you

ok so using those will help my database becoming less hackable??

Member Avatar for vssp

yes , correct, if any one hack the your database , no one not understand easyly

Member Avatar for azalia

yes

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.