Most sysadmins would understand the risk of destructive commands like DROP or DELETE being executed by hackers to the SQL databases they manage. Is there a way to completely disable such commands from being executed, maybe by configuring MySQL / MS SQL / PostgreSQL, or modifying the source code if they are open source, deleting those dangerous features.
Once you have your webapp online,
would someone with honorable intentions
ever need to DROP a table?!
This could be the holy grail solution to "primary" DB security, instead of running around trying to prevent these wholly unnecessary commands. Of course during development or maintainable periods they could be re-enabled, then turned off once not needed.