Re: extract($_POST)
| From: | Monty | Date: | Sat, 26 Oct 2002 19:28:06 +0000 |
| Subject: | Re: extract($_POST) | ||
| References: | 1 2 3 4 5 6 7 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-121534@lists.php.net to get a copy of this message | ||
> Well, one way you can avoid similar things to happen is, you can do
> something like, say, create a user that can only SELECT. If the user can
> only SELECT then it cannot DELETE.
This is a great suggestion from Rick. I already use this method. I have
several MySQL users set up for various functions: one that can only SELECT,
which is the one I use the most, another that can SELECT, UPDATE and INSERT,
and another that can do all of the following plus DELETE.
Monty