I am going to run a Tor Hidden Service on a Linux server. My site will have an SQL database. This DB contains user login, and a few other basic details.
If it makes a difference depending on the software I use, please answer the following:
1) What SQL database software should I use for the best security on my site? IE to prevent SQL injections and other vulnerabilities etc.
2) The database software should also ensure the privacy/anonymity of the server, so no IP address leaks etc... I know having a secure server can reduce this risk so that no attacks can be performed which could leak valuable data. However, perhaps a certain database software might be better at this? I am unsure.
Only free software, preferably open source, the easier to setup and manage the better. I know sanitizing inputs, correct setup and other factors apply when it comes to security.
EDIT: People have seriously misunderstood the question. I was just curious if database software existed which had additional security in case any attacks such as SQLI had somehow gotten passed the application level security.
I am NOT allowing any users to communicate with the database directly, of course there is an application between user and DB. I am once again curious if any DB software would be better than others at protecting the anonymity of the server, perhaps by having an option which prevents the server connecting to anything which isn't local host so an attacker can't make it connect to a site they control to see any incoming connections and log their IPs (I made this up as an example get over it).