This is my first question on ServerFault and I am more familiar with software development than administration so I'm not sure if this is a valid question or not.
I am creating a web application as a learning excercise and I am uncertain as to whether I am taking the correct approach with regards to security. My current plan is to create a user account for the application in the database and remove all permissions except those necessary to execute a set of stored procedures which act on behalf of the web application.
- Is this a recommended approach
- Are there any considerations that I should be aware of?
For reference the application will be written in PHP and the database used is MySQL