Security? (no replies)

Hello altogether,

I'm quite new to MySQL and have a question regarding security.

I have a MySQL instance running on a test server. I can also access it from outside via Internet, so this configuration works fine. However, I'm not sure about the security of the database when it's (theoretically) publicly accessible (if someone has a user name and the respective password).

I configured different users with passwords. Before I fill the database with partly sensitive data, I'd like to get an impression what you think about the security. Is it ok to open the port on the firewall and to forward the port directly for the public internet? Can I put sensitive data into the tables? Or do I need any additional measures for my colleagues to access the database?

Thanks in advance and best regards,

Frank