MYSQL restrict use of CREATE, DROP, ALTER The Next CEO of Stack OverflowAltering DEFAULT Value of Date (MYSQL)MySQL Views and Restricting Insert/UpdatesPHP cannot connect to remote databaseCreating a form with drop downs using MySQL dataCannot connect to MySQL database on remote server using php mysqliMySQL lower_case_table_names causes PHP connection errorProper mysql code to alter table to horizontalmysql restrict query types for user on specific tablesPHP and MySQL database search - removing database credentials from php codePHP loop to alter multiple mysql tables
Why does standard notation not preserve intervals (visually)
How to be diplomatic in refusing to write code that breaches the privacy of our users
What does "Its cash flow is deeply negative" mean?
Can a single photon have an energy density?
How do I get the green key off the shelf in the Dobby level of Lego Harry Potter 2?
Is it a good idea to use COLUMN AS (left([Another_Column],(4)) instead of LEFT in the select?
Is HostGator storing my password in plaintext?
Solution of this Diophantine Equation
Is it my responsibility to learn a new technology in my own time my employer wants to implement?
What can we do to stop prior company from asking us questions?
Are there languages with no euphemisms?
How do I go from 300 unfinished/half written blog posts, to published posts?
Opposite of a diet
How to write papers efficiently when English isn't my first language?
How do we know the LHC results are robust?
Rotate a column
Can the Reverse Gravity spell affect the Meteor Swarm spell?
Apart from "berlinern", do any other German dialects have a corresponding verb?
How can I get through very long and very dry, but also very useful technical documents when learning a new tool?
Where to find order of arguments for default functions
What size rim is OK?
What's the point of interval inversion?
Does the Brexit deal have to be agreed by both Houses?
Why did we only see the N-1 starfighters in one film?
MYSQL restrict use of CREATE, DROP, ALTER
The Next CEO of Stack OverflowAltering DEFAULT Value of Date (MYSQL)MySQL Views and Restricting Insert/UpdatesPHP cannot connect to remote databaseCreating a form with drop downs using MySQL dataCannot connect to MySQL database on remote server using php mysqliMySQL lower_case_table_names causes PHP connection errorProper mysql code to alter table to horizontalmysql restrict query types for user on specific tablesPHP and MySQL database search - removing database credentials from php codePHP loop to alter multiple mysql tables
My ISP offers just one user account for accessing a MYSQL database. AFAIK, I need to store the connection credentials for my database in clear text within my PHP code. Consequently, ordinary users of my site have administrative access to my database. They can't ordinarily misuse this access because the official backdoors I designed in require a password. [The way the password is used to authenticate a user is to search the database's list of users for the password hash and then see if the user is flagged as being an administrator.] But someone who is able to hack into the server's file system could read the PHP code and learn the password for the one and only user that my ISP provides.
Besides having two users with different permissions to the database, is there a way to bifurcate access so that superusers are the only ones able to do CREATE, ALTER, and DROP?
mysqli
asked Mar 8 at 12:41
Walter OneyWalter Oney
504
add a comment |
My ISP offers just one user account for accessing a MYSQL database. AFAIK, I need to store the connection credentials for my database in clear text within my PHP code. Consequently, ordinary users of my site have administrative access to my database. They can't ordinarily misuse this access because the official backdoors I designed in require a password. [The way the password is used to authenticate a user is to search the database's list of users for the password hash and then see if the user is flagged as being an administrator.] But someone who is able to hack into the server's file system could read the PHP code and learn the password for the one and only user that my ISP provides.
Besides having two users with different permissions to the database, is there a way to bifurcate access so that superusers are the only ones able to do CREATE, ALTER, and DROP?
mysqli
asked Mar 8 at 12:41
Walter OneyWalter Oney
504
add a comment |
My ISP offers just one user account for accessing a MYSQL database. AFAIK, I need to store the connection credentials for my database in clear text within my PHP code. Consequently, ordinary users of my site have administrative access to my database. They can't ordinarily misuse this access because the official backdoors I designed in require a password. [The way the password is used to authenticate a user is to search the database's list of users for the password hash and then see if the user is flagged as being an administrator.] But someone who is able to hack into the server's file system could read the PHP code and learn the password for the one and only user that my ISP provides.
Besides having two users with different permissions to the database, is there a way to bifurcate access so that superusers are the only ones able to do CREATE, ALTER, and DROP?
mysqli
asked Mar 8 at 12:41
Walter OneyWalter Oney
504
My ISP offers just one user account for accessing a MYSQL database. AFAIK, I need to store the connection credentials for my database in clear text within my PHP code. Consequently, ordinary users of my site have administrative access to my database. They can't ordinarily misuse this access because the official backdoors I designed in require a password. [The way the password is used to authenticate a user is to search the database's list of users for the password hash and then see if the user is flagged as being an administrator.] But someone who is able to hack into the server's file system could read the PHP code and learn the password for the one and only user that my ISP provides.
Besides having two users with different permissions to the database, is there a way to bifurcate access so that superusers are the only ones able to do CREATE, ALTER, and DROP?
mysqli
mysqli
asked Mar 8 at 12:41
Walter OneyWalter Oney
504
asked Mar 8 at 12:41
Walter OneyWalter Oney
504
asked Mar 8 at 12:41
Walter OneyWalter Oney
504
asked Mar 8 at 12:41
Walter OneyWalter Oney
504
asked Mar 8 at 12:41
Walter OneyWalter Oney
504
504
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55063465%2fmysql-restrict-use-of-create-drop-alter%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55063465%2fmysql-restrict-use-of-create-drop-alter%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
