[Solved]: MySQL Permissions for Coppermine [Solved]: MySQL Permissions for Coppermine
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

[Solved]: MySQL Permissions for Coppermine

Started by PsychoGTI, June 28, 2008, 08:24:44 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

PsychoGTI

What permissions in MySQL should the Coppermine user account have? Right now, I've done the following permissions directly into the 'mysql' database:

grant select,insert,update,delete,create,drop
    -> on coppermine.*
    -> to 'user'@'localhost'
    -> identified by 'password';

Is there any I'm missing, or that I have too much of? The site seems to work now...  just want to be as tight as possible but still function.

Thanks in advance!
P.

Nibbler

You need alter and index for updates. Create and drop are only needed during installation, major updates or installing certain plugins so you could leave those out if you want.

http://coppermine-gallery.net/demo/cpg14x/docs/index.htm#what

If you want to tighten further then apply table specific permissions.

PsychoGTI

Excellent!  Thanks! I've made the changes, and everything looks good.  :-)

Cheers,
P.