title: SQL and security issues
body: <p>This is a theoretical question, I'm a noob in SQL, and I really don't have much experience with it.</p>
  
  <p>First, suppose you have to make a program for consumers that needs certain information form a DB that is not in the local machine, let's say, somewhere over the internet. is it safe to connect directly to the database, and make some queries?</p>
  
  <p>The most worrying thing is, I suppose, that you are exposing a user and a password to the DB, that could be intercepted, being in the program and all that, leaving it open to malicious queries. Could this be fixed with a good encryption between the app and the DB?</p>
  
  <p>Instinctively I suppose a better way to handle this is to make a server application that makes the queries, validates information, handles the sensitive info, and to witch the app connects.</p>
  
  <p>Is this correct?</p>