Take the 2-minute tour ×  I'm a student and we are making a
simple information system for a hospital. How can we improve the
security of mysql database so that confidential information will
be protected.  share|improve this question Shut down the
server—that will make the database impossible to attack. Really:
What steps have you taken so far? If we don't know what the
current state is how should we know what or how to improve? – 
Јοеу Jan 28 '10 at 9:17 You need much more than just protect
confidential data. I also work in a hospital, and security is
not only limitation of access. You must also take into account
high availability (minimize downtime), backup and restore
policies, duplicate systems for testing and production, ... This
is a too vague question. –  jap1968 Dec 8 '11 at 22:11 add
comment  5 Answers  up vote 3 down vote accepted  Security is a
complex issue and it is hard to answer vague questions.  A few
generalisations.  If it makes sense to co-locate your database
and application on the same ser