Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

This article recommends the UNIX nobody user to access MySQL from Joomla scripts. Is this standard practice? Moreover, is it reasonable to use it, say, both for Joomla and WordPress?

share|improve this question
add comment

closed as off topic by mdpc, Magellan, Ward, Khaled, Dave M Jan 20 '13 at 20:01

Questions on Server Fault are expected to relate to professional server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

2 Answers

up vote 2 down vote accepted

This question makes no sense. You don't use unix users to access mysql, it has its own access control and its own users/passwords.

The second part of the question makes some sense and the answer is no. As with anything, separate privileges as much as possible. Create separate users for joomla and wordpress and don't give them access to each others schemas.

share|improve this answer
    
OK, thanks for clarifying. In attempting to separate privileges as much as possible, would you go as far as setting up a different MySQL user for each CMS site (ignoring for a moment modern multi-site options) that talks to MySQL? –  eze Jan 19 '13 at 22:48
1  
Yes, I would separate as much as possible. –  Dennis Kaarsemaker Jan 19 '13 at 22:53
add comment

No, this article does not recommends the UNIX nobody user to access MySQL :

  • The article is not talking about UNIX nobody user but about mysql account.
  • The article did not explicitly recommend using nobody
  • IMHO the article author just picked the wrong username : Something like "exampleuser" instead of "nobody" would have been more accurate.

Here are a few security tips :

  • Using UNIX nobody user for anything is a bad™ idea.
  • Avoid using joomla if possible.
  • Look at article author. Keep in mind that webmasters have poor technical/security knowledge : Their job is to do beautiful websites.
share|improve this answer
    
Thanks for the detailed reply. (Your answer seems OK too, so upvoted.) –  eze Jan 19 '13 at 22:51
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.