secure connect to mysql on separate server?

[orionblue]

hi there,

I'm just wondering if there are any security concerns around having a website that is hosted on server A and uses a database connection to a mysql db that is located on server B.

The obvious issue of the password/login being available to anyone with ftp access... Are there any more I should consider?

thanks!

[mtimdog]

If you do mysql backups and only give the user update/insert/delete rights to only databases the user works with...ie the user can't drop the table or the database you should be fine. Yes, there is a problem with the user getting the login with ftp, but you could place your connection script (or script containing connection variables) above the website's root directory (or above that if ftp has access to directory above website root).

[orionblue]

thanks mtimdog for the tips!