http://qs321.pair.com?node_id=577978


in reply to Re: Basics: CGI MySQL security
in thread Basics: CGI MySQL security

This seems great for super-secure access. But really, I'm trying to keep it simple and a minimal level of security will suffice. If I have some basic login using cookies or http, is it necessary for me also to have the additional security using MySQL logins? I was hoping that the basic web security would be enough and my scripts would all just use the same MySQL ID to access the database...

Replies are listed 'Best First'.
Re^3: Basics: CGI MySQL security
by graff (Chancellor) on Oct 13, 2006 at 00:23 UTC
    No, it's not really necessary to have separate MySQL accounts; if your cgi scripting is reasonably well designed and safe, and you're not dealing with content that poses an attractive target for attack or abuse, a single MySQL account is fine.