bri0987 Posted November 29, 2007 Share Posted November 29, 2007 For the MySQL database associated with my PHP shopping cart... What is the Privileges I should set for the database user that my admin and customers use with the database? >>> Currently the user has these privileges: SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, FILE, INDEX, ALTER, CREATE TEMPORARY TABLES, CREATE VIEW, SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, EXECUTE (FYI: I use PhpMyAdmin) Thanks BRI Link to comment https://forums.phpfreaks.com/topic/79360-solved-unsure-about-these-mysql-privileges-hmmm/ Share on other sites More sharing options...
revraz Posted November 29, 2007 Share Posted November 29, 2007 Your users dont directly interact with the database, your PHP scripts do. Link to comment https://forums.phpfreaks.com/topic/79360-solved-unsure-about-these-mysql-privileges-hmmm/#findComment-401764 Share on other sites More sharing options...
bri0987 Posted November 29, 2007 Author Share Posted November 29, 2007 I was not sure if I made the wrong chooses, that a hacker could could in and RUN "DELETE TABLE" scripts or something like that... what do ya think? or should I not worry about it? Link to comment https://forums.phpfreaks.com/topic/79360-solved-unsure-about-these-mysql-privileges-hmmm/#findComment-401791 Share on other sites More sharing options...
trq Posted November 29, 2007 Share Posted November 29, 2007 Generally speaking, the account with wich your php scripts connect to MySql via need only have access to SELECT, INSERT, UPDATE, DELETE. Link to comment https://forums.phpfreaks.com/topic/79360-solved-unsure-about-these-mysql-privileges-hmmm/#findComment-401794 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.