At 04:49 PM 09/04/2001 -0400, Lisa Nyman wrote:
>Hi,
>
>One thing to do is to be sure that the db user who accesses the db
>from a web page has properly restricted rights within the database.
>
>For example, in mysql, you can set table and column priveledges for each
>user and table.
This is a very good point. I see far too many people setting *global* user
access privledges within the 'user' grant table in MySQL, instead of giving
that user all "N"'s in the user table, and only giving them specific
database level access in the 'db' table. So if someone does happen to get
in, they can only muck up that database.
mel
--
mel matsuoka Hawaiian Image Productions
Chief Executive Alphageek (vox)1.808.531.5474
[EMAIL PROTECTED] (fax)1.808.526.4040
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
