Color
Color

Reputation: 262

Manage User Privileges in cPanel

Is cPanel's Manage User Privileges (database and username connection privileges) trustable?

i have a username connected to a database which can only SELECT , and another username connected to the same database which can INSERT and SELECT

i have used the SELECT-only one in a not-so-secure script can i trust this Privileges so no one can INSERT anything with this username?

Is this a good practice?

Upvotes: 1

Views: 3458

Answers (1)

mikakun
mikakun

Reputation: 2265

cpanel is just a GUI (& the nicest imho) to set your database privileges settings. Since most webserver won't allow you to connect directly to the database server through a terminal or to manage privileges through phpmyadmin, it's the easiest way to do it.

Then it's up to you only to secure your code against sql injection which is good practice

see http://php.net/manual/en/security.database.sql-injection.php

Upvotes: 1

Related Questions