I have a Mysql database where one table is meant to store user complaints/comments/suggestions. I am using Mysqli to connect to the database with a
At this time, the "myuser" and "mypassword" are the same as the id and password I use as the admin to log into the phpmyadmin backend. Is this the correct way to do this? Does this give out more power to the user than I want to? Does it imply that the users will be able to run DELETE and ALter statements on the table/database?
My concern is that since the id and password are the admin's, users actually sending the feedback could also use it to do something that could harm the database. Is it necessary to use the admin id and password in this code?
My shared hosting does not allow me to create additional users - at least that is what I have understood from my chat with their customer care (they say I need to take a dedicated server plan to be able to add more users. I don't have the budget to take on the extra cost of the dedicated virtual server). There is no Users table or User Privileges table in the installation. Does this mean that I cannot create my own tables to manage users and assign privileges? Would any such tables that I create work exactly like those that come with the installation? Is there a restriction to table names - i.e. that any such tables that i might like to create cannot have certain names?