Vali Ploiesti
Vali Ploiesti

Reputation: 49

How many db-users should I create?

guys!

I need to ask you a question... I'm mew in programming business and if this question seems silly, please indulge me. I have a little site where people have to register in order to post something. So I register every user in the database. I log into the db with:

$pdo = new PDO("mysql:host=localhost;dbname="MY-DB", "My-USER", "My-password");

The question is: when I log into the databse to do whatever operation I need (select, update, delete, insert) how many users ("MY-USER") should I create to login to the db ? Should I create one db-user for every users that registers on my site, or one one single user is enough to do the operations ? Thanks.

Upvotes: 0

Views: 357

Answers (1)

peter
peter

Reputation: 15089

In normal situations you should have additionally to a root user, which can create new databases and add new users, you should create one user per application which is accessing the database, so that a bug in one application wouldn't affect another.

In your case this means to have 1 additional user for your web application which has all permissions on one mysql-database and can create the necessary tables as well as read / modify data in those.

You should not use mysql as your user manager, instead create a table with the users, their (hashed) passwords, ... and manage them in your application.

Upvotes: 1

Related Questions