access to DB and security
| From: | Alain Roger | Date: | Wed, 08 Nov 2006 17:05:33 +0000 |
| Subject: | access to DB and security | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-244383@lists.php.net to get a copy of this message | ||
Hi,
My web hoster gave me a login and password with which i can connect to DB,
perform some actions as DB owner / superuser just for my DB.
If i use this login + password to connect and perform some actions from my
web pages, everybody can hack my DB and do what they want.
My web hoster will not give me some particular role/user with which user can
only execute some stored procedure but can not administrate my DB.
therefore, how can i make my web pages users connect to DB (with my
administrator login and password) and run some stored procedure without
risking to see my DB hacked ?
thanks a lot,
Alain