Extra Defensive Measures

There are many other defenses you can employ to help reduce the chance of compromise. For example, in PHP, make sure magic_quotes_gpc=1 is in php.ini. Also, remove access to all user -defined tables in the database and grant access only to the stored procedures. This helps prevent attackers from querying the raw table data directly.