Technote Details :: Using MX Query Builder on a live site

I am using MX Query Builder to visually create my queries, directly on the application's live server, and connecting to the live database server. The MX Query Builder URL displays various data in the address bar.

This presents a security risk, because a number of parameters are sent, and could be collected by the search engines, thus exposing your database configuration and even access passwords.

MX Query Builder should NOT be used directly on live servers that can have their URL's found and indexed by various tools and search engines, as it passes connection data through URL parameters. This can be a security risk, as if the passwords are found, the site is compromised. Therefore, use the MX Query Builder only on testing servers, to build your application queries.

Login to add a new note