On Mon, Jul 15, 2002 at 10:21:25PM +0100, Nick Middleweek wrote:
> Hello,
> 
> Here's what I'd like to do...
> 
> * Create a new user in mysql.

See the "GRANT" command in the manual.

> * Let them login and create a new database.

Ditto.

>  * I want this database to be only viewable by the
>    user that created it and also the mysql administrator.

Ditto.

>  * I would like that user to be able to create users as
>    well but they can only see databases created by the
>    original user.

Note the "WITH GRANT OPTION" part of the docs for the "GRANT" command.

> Is this at all possible?

If I understood your right, sort of.  You probably don't want users to
be able to directly create users.  Maybe via a web interface?

> How do ISPs offer MySQL databases?
> Surely they don't have an instance of mysql per web site hosted!?

Some do.  Most don't.  It all depends. :-)

> Maybe they've done it through their own interfaces to mysql but
> can't that be hacked?

Yeah, most web software is rather buggy and can probably be hacked
without a lot of effort.  Face it, few PHP "developers" really
understand much about application security.  It's sad but true.

Jeremy
-- 
Jeremy D. Zawodny     |  Perl, Web, MySQL, Linux Magazine, Yahoo!
<[EMAIL PROTECTED]>  |  http://jeremy.zawodny.com/

MySQL 3.23.51: up 46 days, processed 1,002,966,168 queries (247/sec. avg)

---------------------------------------------------------------------
Before posting, please check:
   http://www.mysql.com/manual.php   (the manual)
   http://lists.mysql.com/           (the list archive)

To request this thread, e-mail <[EMAIL PROTECTED]>
To unsubscribe, e-mail <[EMAIL PROTECTED]>
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php

Reply via email to