Permissions done on MySQL side or PHP side? -


When I am grabbing data from my table for which permission is required, then all permissions should be made there ? Such as checking an administrator or seeing those data (MySQL)?

Or should I catch it if they have a record, then check the specific actions on the PHP side (like see, add, edit, delete)?

This is usually more efficient to do everything in SQL, but it is even more complex, And it can be very difficult to maintain.

Mostly it depends on your exact safety model and safety concerns.


Comments

Popular posts from this blog

windows - Heroku throws SQLITE3 Read only exception -

lex - Building a lexical Analyzer in Java -

python - rename keys in a dictionary -