MySQL privileges for PHP server

Question

I want to ask maybe a stupid question, but still: if I have php server that communicates with MySQL and it is protected against injection attacks, is it still important that I set privileges for each and every user separately? Or all that matters is that I have already set basic privileges for all users? e. g. no "DROP ALL DATABASES" stuff. Thanks for the answer! I really appreciate it!

every user should have no more privileges than they absolutely need — , Mar 08 '16 at 19:54
As @Dagon says, you should follow the principle of least privilege. https://en.wikipedia.org/wiki/Principle_of_least_privilege — Chris, Mar 08 '16 at 20:08
Thank you all, sorry for not responding, you were right - I will pick one right answer, but all of you had a point — Jan Jindra Jindráček, Mar 15 '16 at 20:18

score 0 · Accepted Answer · edited May 23 '17 at 10:28

0

You can't steal something that doesn't exist

Don't give hackers the ability to manipulate anything (db information, code, privileges, etc.)

You can never be too safe

edited May 23 '17 at 10:28

Community

1
1

answered Mar 09 '16 at 02:30

MySQL privileges for PHP server

1 Answers1

You can never be too safe