note 64591 added to security.general

Ideally you would be connecting to a database that had support for stored procedures. In that case you wouldn't have to give the application any access to the tables. Only execute permissions on those stored procedures which had additional parameter validation and error handling... my 2 pents -- Ben Sullins http://KingoftheGreens.com ---- Server IP: 66.163.161.117 Probable Submitter: 64.65.163.141 ---- X-Spam-Status: No, hits=3.1 required=5.0 tests=DATE_MISSING,FROM_NO_LOWER autolearn=no version=2.64 ---- Manual Page -- http://www.php.net/manual/en/security.general.php Edit -- http://master.php.net/note/edit/64591 Del: integrated -- http://master.php.net/note/delete/64591/integrated Del: useless -- http://master.php.net/note/delete/64591/useless Del: bad code -- http://master.php.net/note/delete/64591/bad+code Del: spam -- http://master.php.net/note/delete/64591/spam Del: non-english -- http://master.php.net/note/delete/64591/non-english Del: in docs -- http://master.php.net/note/delete/64591/in+docs Del: other reasons-- http://master.php.net/note/delete/64591 Reject -- http://master.php.net/note/reject/64591 Search -- http://master.php.net/manage/user-notes.php