I\'m developing an easy website and I\'m trying a sqlite database. In contrast to MySQL, when you connect to a db you don\'t say and user/password, and with MySQL you do.
So, anybody can access it. Isn't it a security hole to keep sensitive information?
As others have said, it was not a design goal of the SQLite folks. They had other goals, like being able to embed the database code directly in your app.
You can password protect and encrypt the SQLite database, but you need to use SQLCipher.