Lectures

In this lecture, you'll learn how to set up auditing and logging of user actions in PostgreSQL: track connections, log data changes, analyze logs for security and optimization, and use best practices for managing event logs.

In this lecture, you'll learn how to use the pgcrypto extension in PostgreSQL for encrypting, decrypting, and hashing data, as well as generating random tokens. We'll cover symmetric and asymmetric encryption, password protection, practical scenarios, and common mistakes when working with cryptography in your database.

In this lecture, you'll learn how to implement data encryption in PostgreSQL at the level of individual columns and tables. We'll check out some hands-on examples of using pgcrypto functions for symmetric encryption, adding encryption to existing tables, some quirks of working with encrypted data, and also how to safely store passwords using hashing.

In this lecture, you'll learn how to protect your PostgreSQL database from SQL injections and other attacks using prepared statements (PREPARE/EXECUTE), parameterized queries, and best practices for data validation and privilege setup. SQL and Python examples will help you get how to safely handle user input.

In this lecture, you'll learn about the most common mistakes when setting up PostgreSQL security: excessive privileges, lack of encryption, SQL injection vulnerabilities, misconfigured pg_hba.conf, RLS mistakes, risks with admin roles, insufficient logging, and outdated authentication methods. For each mistake, you'll get practical examples and ways to avoid them.