@ Joozey:

I should have mentioned it more clear indeed, your DLL will lead to your database
Thus users need to wait until you changed it towards the final version.

@ William:

If you set up your own private MySQL database (and not shared by any other users), then there is really no problem. The problem occurs (as D3D mentioned) once you start letting other users connect towards your database. PHP is very easy to learn since that was the general intention of the developers of PHP but it brings one problem Due to the fact that it is that easy, a shared database makes the php scripts visible so other users can attempt to change it (like D3D mentioned as well ^^)

Keep to the basics, make it private to say it simple

Cheers

Frazzle

@D3D: I don't know the precise security details of my a server, but I do know that each database is separated from the rest of the server. Furthermore it is prohibited to use commands like drop database and create database. Also, the exact details to log in are baked into the DLL, and such I believe untraceable. So I don't think it's possible to sniff through other ones database without proper authentication, but I could be wrong. I'll take a look for wireshark as I have never heard of it . Any more possible breach tips are welcome, Thanks!

I searched a little about legality of mysql C api and shared database usage. But I don't think it's really all that tight. If you have your own database then there is nothing to worry about as far as I can read (like Frazzle said), I'm still unsure if creating databases for other people is legal, but as this is not possible yet anyway, theres nothing to be concerned about anyway.

Besides, if you happen to register a database on my server, I wont allow you to use it for commercial projects, so I believe it's still not an issue.

I greatly appreciate your input. If you say so on the license, but our attorney says stay away, and I'll listen to him. As far as multiple servers go that is not what I was talking about, to satisfy your curiosity though, suffice to say we have lot's of web servers. All of the MySQL databases need the 3 parameters to operate on our systems. But hey no biggie because we are NOT using MySQL them for our distributed software packages.

Joozey: If those MySQL db servers are seperate or chrooted it becomes a little harder. Though if you are on the same server using php it can become insecure very soon. That is if php can be executed by others on the same server. I'm not sure, but I think not a lot shared hosting have everything chrooted because it will take much more resource.

I can send few scripts to test. I've not posted them on this forum because i'm not certain if it's allowed. And not want to give anyone bad ideas. Security was also one of my problems when working on Destop MySQL plugin. On my server i'm using sth like fail2ban, portsentry & snort to keep out most bad people. This also helped to keep running stable and lockout the automated bruteforce hackers from locations such as China. In USA, Germany or Holland I can talk to the provider, but China..

Atomix: Have to take a look. Though i'd like to mention there is MySQL++ project which let you interface with MySQL and can be used with Litec. This project was released under LGPL license.

If i'm correct it's allowed to freely enchange and distribute, although this might not be the case anymore: if linked and fall under gpl; I'm not making commercial apps with GameStudio so i'm not really worried about all that.

For commercial applications you might require a license and must use enterprise instead of community release. Not going to speak against advise from your lawyer. Guess it's best to open another thread on this issue or talk to sales rep at MySQL department.

D3D: I bought a server domain at some hosting company. I don't own the whole server. They secured everything for me.

But if you like to try some scripts, I'm willing to test the security of the server ^^. I'll send you a PM.

If you want to make a commercial game that features an online database, you should probably be looking for your own server anyway.

D3D: Thank you for taking the time to respond to my statements. I will take a good look at MySQL++ (thanks for the tip) if I can't get the sqlite libraries working (haven't been able to yet) this may be the alternative.

i posted an example using sqlite at your other thread (about using dlls.), if you checked it and cant get it working, you can always ask me.

Just what I need

This is a fairly outdated version, although I have not yet released the renewed thing. It's still under development, and hope to release it very soon.

Though it looks great, I need to be albe to connect to my own database for it to be usefull to me.

Any aproximate date of when this feature will be released?