Paul Grimshaw

28 reputation

	28 reputation	bio	website		visits	member for	9 months
2 badges		location			seen	Oct 23 '12 at 21:17

6 Actions

Aug 20	awarded	Student
Aug 16	awarded	Scholar
Aug 16	accepted	Drupal Security & Two DBs
Aug 15	comment	Drupal Security & Two DBs The most they would get from the main database would be the users name and email. Their phone numbers, addresses, assets (computers etc), invoices and even individual comments for jobs etc are all in separate nodes so actually I really don't see how it would be useful to them. That said, I was thinking about the performance impact more and I think you're right, it would be too slow, for the moment anyway.
Aug 15	comment	Drupal Security & Two DBs You make very good points, even if it was true that the information couldn't be used, it still wouldn't make good press. We all know if there is anything technical to say about something it'll just be lost in the rest of it. We do a lot of what you mention already but I am always looking for better processes and security so we'll reappraise it again. Thanks!
Aug 14	asked	Drupal Security & Two DBs