Hi!
Two questions about security :
1/ About PHP frontend :
The template file, for example search.htm.mysql contains the user/password
for mysql user. The comments lines says 'chmod mod to 600'.
Ok, but, how should I chown it ? Because now this file is :
rw-r--r-- : user.user and that's ok.
If I chomod it to 600, than the script answer it can't read it ...
So wich user should it be ?
2/ About GRANT in mysql :
First the user that is uses for indexer program : 'index' then another
user used only for the php frontend 'search'
GRANT select on udmsearch.* TO search@localhost ;
This is not sufficient because of the need to create and drop temporaly
tables. What are the most restrictives privileges we can give to the user
'search' ? and to the user 'index' ?
Fran�ois
___________________________________________
If you want to unsubscribe send "unsubscribe general"
to [EMAIL PROTECTED]