I need an assessment of how safe my environment is and what I could improve.
I have a windows server running with MySQL (mariaDB). Via Excel (and MySQL ODBC-Connector) Excel connects to a database and gets and writes data into it.
To avoid writing passwords and usernames into the VBA code (because its easy to unlock the VBA password), each USER gets his own user in the database and his password via email. This Username/Password must be entered once when starting Excel in a user form and is stored "encrypted" in a txt file hidden on the PC (to not enter User/Password each startup).
Is there anything wrong with this or is it insecure in some way? the database user\'s access rights are limited to the most necessary (read/write).
Any improvments?
Thanks