开发者

Mysql drop permission for Wordpress

We are running a Wordpress site and one of the plug-ins requires drop permission on the database. (We curre开发者_如何学Cntly do not grant drop permission and have not needed to for any other plug-ins.)

Is there a security concern if I grant the public connection/user drop privileges?

The plug-in in question is simplepress and we receive an error asking for drop permissions:

[DROP command denied to user xxxxxxx for table 'wp_sfwaiting'] TRUNCATE wp-sfwaiting


Mysql changed in that it requires DROP permission since 5.1.16: Check it here.

Truncate is often used as a fast table clear option (as recommended by MySQL themselves). It should be changed to delete from <table> by that plugin programmer to get away only with the DELETE permission.

Until that you may grant drop only for that specific table..

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜