Database Security Review: A Practical Framework