RE: [PHP] Re: Selecting a special row from the database
| From: | Jim Moseby | Date: | Tue, 08 May 2007 12:50:56 +0000 |
| Subject: | RE: [PHP] Re: Selecting a special row from the database | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-254547@lists.php.net to get a copy of this message | ||
>
> About the sql injection, the db user I set for this has only select
> privileges, should I be worried even with this ?
>
Absolutely. If I have select privs, I could possibly select passwords,
credit card numbers, or whatever else sensitive info you have in your db.
JM