Database restrictions

[destrugter]

Ok, is it possible for me to restrict access to my db to only me (or at least only me and you guys) by blocking all ip address's except mine and the ones you guys wont let me block?

EDIT:

Nevermind, dont answer that question, i wasnt thinking about it when i was posting...if i blocked access only i would be able to put stuff in.

[Tyler]

There is no point... it already requires a username and a password so only you have access to it unless you make a page that lets others enter data in.

[UnlimitedMB]

We already block all ips from accessing the mysql server directly.
Mysql connections must come from php and know the database password.

[destrugter]

is there an extra security percaution i can take or are you guys already taking all the steps necessary to protect the database?

[Tyler]

We protect the DB server, however you need to make sure your php scripts that are accessing the database are secured. Like if your letting people enter their info then you need to make sure that it is checked before entered into the database because people could enter a mysql injection into your code which could mess up your whole database.
Here is a web site with more information on that: http://www.tizag.com/mysqlTutorial/mysql-php-sql-injection.php.

You also need to make sure that your mysql password is complex, and that you dont write it down in any file that could be viewed publicly. A php file that is like config.php that does not echo the variable that is storing your password is usually fine.