Reputation: 262
Is cPanel's Manage User Privileges (database and username connection privileges) trustable?
i have a username connected to a database which can only SELECT , and another username connected to the same database which can INSERT and SELECT
i have used the SELECT-only one in a not-so-secure script can i trust this Privileges so no one can INSERT anything with this username?
Is this a good practice?
Upvotes: 1
Views: 3458
Reputation: 2265
cpanel is just a GUI (& the nicest imho) to set your database privileges settings. Since most webserver won't allow you to connect directly to the database server through a terminal or to manage privileges through phpmyadmin, it's the easiest way to do it.
Then it's up to you only to secure your code against sql injection which is good practice
see http://php.net/manual/en/security.database.sql-injection.php
Upvotes: 1