Script injection attacks on mysql

[RFH Customer: webb0]

I'm used to working with ASP/SQL Server and know quite a few databases have been infected by script injection attacks. As well as some defensive programming I normally use stored procedures and a user id with the minimum amount of permissions necessary in my connect string to prevent this.
However I noticed in an earlier post that per user permissions are not supported. I'm new to mysql and just finding my way round phpmyadmin - I cant see anything about stored procedures.
Just wondered if/how other people are handling this ? (I'm using asp/mysql). Any tips/re-assurance appreciated.
cheers

[RFH Reseller: nick]

As far as I know PHPMyAdmin does not provide an interface to stored procedures. You can obviously create and view them manually by executing sql within PHPMyAdmin.

There are many apps you can use to interact with your database that have a gui for creating and viewing stored procedures.

Either way, you should be able to protect your SQL sufficiently by escaping the input and/or using prepared statements.

[Tanzy]

You can download the GUI tools for mySQL from here

http://dev.mysql.com/downloads/gui-tools/5.0.html

I must admit that I prefer to use them than PHPMyAdmin

[RFH Customer: webb0]

Thanks for your advice guys. So far mySql seems pretty nice to work with. I've been using asp so far as it's what I know I can code quickly - next step is to go the whole hog and try a bit of php.