note 88224 deleted from function.mysql-change-user by thiago
| From: | thiago@php.net | Date: | Fri, 16 Jan 2009 12:08:27 +0000 |
| Subject: | note 88224 deleted from function.mysql-change-user by thiago | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-149311@lists.php.net to get a copy of this message | ||
Note Submitter: Johan Kruse
----
I totally agree on this,
If I needed to write something to the database and I'm currently logged in with a user which
has only read access, do I need to terminate my persistent connection just to switch users?
This is a basic principle of security, only grant access for what you need, it prevents a whole lot
of SQL injections.