[freetds] readonly access with freetds and php
James K. Lowden
jklowden at freetds.org
Fri Dec 22 22:42:30 EST 2006
Joseph Harth wrote:
> I compiled php and freetds and it works like a charm. I would like to
> disable all kinds of updates to tables and allow only select queries
> with php. I am not sure if this is possible. I could create a user
> with read only access to the tables but scripts could be run under a
> different user that has more rights and open some holes.
A common practice is to make *all* tables read-only (or deny all access
the tables), and write stored procedures to support the application. Grant
privileges as necessary on the procedures to groups. Add users to the
groups. Done. No script can open a hole.
> Not sure if there is a way to
> hack freetds to disable updates deletes and drops of tables but if there
> is a way i would like to do that.
It's not possible. FreeTDS doesn't parse your SQL. It can't distinguish
between SELECT * FROM TABLENAME and DELETE TABLENAME or even DROP
TABLENAME.
HTH.
--jkl
More information about the FreeTDS
mailing list