note 64591 deleted from security.general by nlopess
| From: | nlopess@php.net | Date: | Wed, 19 Apr 2006 10:38:53 +0000 |
| Subject: | note 64591 deleted from security.general by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-108552@lists.php.net to get a copy of this message | ||
Note Submitter: me at bensullins dot com
----
Ideally you would be connecting to a database that had support for stored procedures. In that case
you wouldn't have to give the application any access to the tables. Only execute permissions on
those stored procedures which had additional parameter validation and error handling...
my 2 pents
--
Ben Sullins
http://KingoftheGreens.com