Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This article recommends the UNIX nobody user to access MySQL from Joomla scripts. Is this standard practice? Moreover, is it reasonable to use it, say, both for Joomla and WordPress?

share|improve this question

closed as off topic by mdpc, Magellan, Ward, Khaled, Dave M Jan 20 '13 at 20:01

Questions on Server Fault are expected to relate to server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

up vote 2 down vote accepted

This question makes no sense. You don't use unix users to access mysql, it has its own access control and its own users/passwords.

The second part of the question makes some sense and the answer is no. As with anything, separate privileges as much as possible. Create separate users for joomla and wordpress and don't give them access to each others schemas.

share|improve this answer
OK, thanks for clarifying. In attempting to separate privileges as much as possible, would you go as far as setting up a different MySQL user for each CMS site (ignoring for a moment modern multi-site options) that talks to MySQL? – ezequiel-garzon Jan 19 '13 at 22:48
Yes, I would separate as much as possible. – Dennis Kaarsemaker Jan 19 '13 at 22:53

No, this article does not recommends the UNIX nobody user to access MySQL :

  • The article is not talking about UNIX nobody user but about mysql account.
  • The article did not explicitly recommend using nobody
  • IMHO the article author just picked the wrong username : Something like "exampleuser" instead of "nobody" would have been more accurate.

Here are a few security tips :

  • Using UNIX nobody user for anything is a bad™ idea.
  • Avoid using joomla if possible.
  • Look at article author. Keep in mind that webmasters have poor technical/security knowledge : Their job is to do beautiful websites.
share|improve this answer
Thanks for the detailed reply. (Your answer seems OK too, so upvoted.) – ezequiel-garzon Jan 19 '13 at 22:51

Not the answer you're looking for? Browse other questions tagged or ask your own question.