Member Avatar for Zagga

Hi folks.
I'm developing a MySQL database driven, PHP web application that will be used by the general public and I'm starting to get a bit paranoid about database security.

While creating the site I was using a single, full privileges database user to connect on each page that required it. I'm now thinking it would be safer to use different database users, with different privileges, for each separate page of the site. For example: On the login page, I create a database user that can only SELECT data from the MEMBERS table.
The idea being that if someone manages to discover the username and password of the DB connection on the login page, and somehow managed to run a query with it, they can't do much harm as they can only SELECT a limited amount of data.

Do you think this is a good idea and if so, how far should I take it? Would a single user with privileges to perform all the required tasks on entire site be okay or should I have a different user on each page?

Any thoughts or suggestions would be gratefully received.
Zagga

  • 2 Contributors
  • 2 Replies
  • 244 Views
  • 22 Hours Discussion Span
  • Latest Post Latest Post by Zagga
Member Avatar for pritaeas

The only way to get to your usernames is when your webserver has been cracked already (unless you've been sloppy). So even if you use more accounts, they can get to it anyway at that point. IMO use only select/view/stored proc priviliges with heavy logging and no physical deletes.

Member Avatar for Zagga

I thought I was probably looking at it the wrong way. Best I start learning about stored procedures.
Thanks pritaeas, for putting my mind at ease :)

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.