Hi!

Two questions about security : 

1/ About PHP frontend : 

The template file, for example search.htm.mysql contains the user/password 
for mysql user. The comments lines says 'chmod mod to 600'. 

Ok, but, how should I chown it ? Because now this file is :

rw-r--r-- : user.user and that's ok.
If I chomod it to 600, than the script answer it can't read it ...

So wich user should it be ? 


2/ About GRANT in mysql :

First the user that is uses for indexer program : 'index' then another 
user used only for the php frontend 'search'

GRANT select on udmsearch.* TO search@localhost ;

This is not sufficient because of the need to create and drop temporaly 
tables. What are the most restrictives privileges we can give to the user 
'search' ? and to the user 'index' ?

Fran�ois
___________________________________________
If you want to unsubscribe send "unsubscribe general"
to [EMAIL PROTECTED]

Reply via email to