[Stahler]

Hi folks, I read in my php book that if you create a website and a mysql database connection string, you should limit the privleges that the user in the connection string has, for security reasons. The book I have only mentions how to do this using the MySQL client. Ive looked at phpmyadmin on my site host and there is no way to GRANT privleges through phpmyadmin (or am I wrong). Is there a way to do this using phpmyadmin? If there is no way, is it because there is no security risk or what?

TIA

Bill

[blaw]

Hello,

I don't use pMA a lot so I can't be sure of this, but if you are using your webhosting company's server, chances are that you do not have "add/edit user" kind of function provided by your host within pMA.

The following is a quote from Main Documentation of phpMyAdmin:

Originally Posted by http://www.phpmyadmin.net/documentation/

NOTE: phpMyAdmin does not apply any special security methods to the MySQL database server. It is still the system administrator's job to grant permissions on the MySQL databases properly. phpMyAdmin's "Privileges" page can be used for this.

There's also some information regarding the privaleges in pMA in this doc, so if you are interested, you should read it.

Also, if you do not have shell access to your account, then how did you create your first username? If it's a control panel like CPanel, wasn't there any options (privaleges) that you can select upon creating a user?

I think it's best, if you are using a web hosting account, that you ask your hosting provider this question. Maybe they can give you additional username with less privaleges - or at least tell you how to create one.

Hope this helps.