Sharing mySQL record with out compromising security

edpudol

I have a collection of url on my database and want to share to other webmasters this information, by letting them to connect to my mySQL database but of course I don't want to give them my database information. (password, username, and others)

What I plan is creating a script that will connect to other script in my website, the first script should be use by other webmaster and the other one is installed in my website.

So every time the other site request info to my database it will request from the script installed on my site then transfer the info to the requesting script.

Is this possible? how can I do this?

Thanks
Ed

Mordecai

You can't just give them a MySQL user with read-only access to the table with the data they need?

cnperry

http://us2.php.net/manual/en/function.include.php

It's do-able, but without actually testing it I'm not sure how secure it is. It appears that the other web masters could still see the code if they wanted. Why not just create another mySQL user that has read-only privs?

edpudol

Hi cnperry!

I think the manual really helps what I want to do, I will get you inform if this works and let you see the result.

thanks

LordShryku

I'm a bit more partial to creating an export type file (XML, CSV, text) that they could just download...

edpudol

Your idea is okey, if the information I want to share is not updatable.

But what I am going to share with other is real time updates.

bubblenut

Web services? Have a look at SOAP, you can embed the data as XML in the response or just use CSV, you can even send binary data in attachments.

Might be a little overkill just for accessing a table but if this is merely part of a larger system you could integrate a lot more functionality. Also, you would have the benifit of controlling exactly how they access the database (you're bound to get some t**t that locks the table for 10 minutes with some dumb query).

LordShryku

Originally posted by edpudol
Your idea is okey, if the information I want to share is not updatable.

But what I am going to share with other is real time updates.

A very small php script would do any of these real time.