Logging into the mysql

[PlaneGuy]

Hey ho, all the millions of people who read this forum.

I was going along making a simple php news thing for my front page when I realize I have to log into the mysql server to connect. Now, I have the db owner account, but shouldn't I log in with something else? With, say, fewer permissions? Does mysql have some special "you're special" account safe for the webserver to log in as? Am I paranoid?


Thanks in advance to all you people out there

[Matt]

Hey ho, all the millions of people who read this forum.

I was going along making a simple php news thing for my front page when I realize I have to log into the mysql server to connect. Now, I have the db owner account, but shouldn't I log in with something else? With, say, fewer permissions? Does mysql have some special "you're special" account safe for the webserver to log in as? Am I paranoid?


Thanks in advance to all you people out there

You may be a little paranoid on that, but if you want a special user with a limited set of permissions on a specific table, column, or database file a trouble ticket from within your account (http://yourdomain.com/cpadmin/) with the permissions to apply to the user, host (if not supplied, it will be bound to localhost), and password and I'll get that setup for you.

[PlaneGuy]

Nah, that's ok. If you're fine with it, then I'm fine with it. I just wanted to know if there was already something set up for that or not. I'll use the owner account.

Thanks.

[Matt]

Nah, that's ok. If you're fine with it, then I'm fine with it. I just wanted to know if there was already something set up for that or not. I'll use the owner account.

Thanks.

It's honestly not a problem if you'd like that extra sense of security to your application. Given you're writing it yourself and it's not being audited, you could always run into a bug where you invariably dump your configuration data to the MySQL server by not sanitizing input data. If the MySQL password is the same as the account password, then you've got a problem. Really, if you'd like to add an underprivileged user with a different password, it's not a problem to do at all.