MySQL Privileges

Do I need more than one user?

[The Cricketer]

If my webhost had the following in the FAQ section of its support site, is it just a functional problem or could this comprimise the security of the MySql database?

Can I create a separate username and give it specific access permissions?
------------------------------------------------------
We run a single user on our MySQL configuration so it is not possible to have secondary users.

On reading a MySQL/PHP book I got the impression that it was good practice to create other users who didn't have full access pivileges to the database. Maybe just to insert, update and select records. But this doesn't seem possible.

More info: The host allows me to set one user with my own password.

So, is it just a functional problem or could this comprimise the security of the MySql database?

[coopster]

Seems like a contradictory statement to me.

We run a single user on our MySQL configuration so it is not possible to have secondary users.

versus

The host allows me to set one user with my own password.

So if they allow you to run your own user/pwd, do they allow others that they are hosting as well? If so, they have contradicted themselves. Or am I missing something here?

[The Cricketer]

Maybe I stated it a bit wrongly?

The Web Hosting Control Panel allows me to create a database. At that time I can create a username and password for the database, but that is all. Does that clear things up?

[timster]

The Web Hosting Control Panel allows me to create a database. At that time I can create a username and password for the database, but that is all.

Yikes! If that's so, maybe you need a new Web host. Are you sure the new user setup is not just hiding someplace you didn't suspect? You might also try assigning a new user with a SQL query:

[dev.mysql.com ]