CODEWITHSUNDEEP
mysqlwordpress
user167850
user167850

Reputation: 497

Mysql drop permission for Wordpress

We are running a Wordpress site and one of the plug-ins requires drop permission on the database. (We currently do not grant drop permission and have not needed to for any other plug-ins.)

Is there a security concern if I grant the public connection/user drop privileges?

The plug-in in question is simplepress and we receive an error asking for drop permissions:

[DROP command denied to user xxxxxxx for table 'wp_sfwaiting'] TRUNCATE wp-sfwaiting

Upvotes: 1

Views: 563

Answers (1)

Bob S
Bob S

Reputation: 295

Mysql changed in that it requires DROP permission since 5.1.16: Check it here.

Truncate is often used as a fast table clear option (as recommended by MySQL themselves). It should be changed to delete from <table> by that plugin programmer to get away only with the DELETE permission.

Until that you may grant drop only for that specific table..

Upvotes: 2

Related Questions