note 109559 added to security.database.design

Never say never. There are cases where you want to connect with the ability to run arbitrary queries, for example to update a db schema at run-time or the like. I think it would be more correct to say that applications should connect with the least privilege they need. ---- Server IP: 69.147.83.197 Probable Submitter: 111.95.102.137 ---- Manual Page -- http://www.php.net/manual/en/security.database.design.php Edit -- https://master.php.net/note/edit/109559 Del: integrated -- https://master.php.net/note/delete/109559/integrated Del: useless -- https://master.php.net/note/delete/109559/useless Del: bad code -- https://master.php.net/note/delete/109559/bad+code Del: spam -- https://master.php.net/note/delete/109559/spam Del: non-english -- https://master.php.net/note/delete/109559/non-english Del: in docs -- https://master.php.net/note/delete/109559/in+docs Del: other reasons-- https://master.php.net/note/delete/109559 Reject -- https://master.php.net/note/reject/109559 Search -- https://master.php.net/manage/user-notes.php