Lozarythmic wrote:

> Dont know if i am missing something here as i'm a bit of a PhP/SQL
> newb but here goes:
>
> Surely if the correct permissions are given to the web user,
> tables/databases cannot be dropped?
>
> The account on my machine which is used by webusers is restricted to
> select, update, delete etc and drop is most certainly not allowed!
>
> Stop me if i'm missing something obvious :)

Even if you don't have rights to drop a table, you can still do a lot of
damage with delete rights. delete * from tablename is pretty damaging...

--
Chris Hope - The Electric Toolbox - http://www.electrictoolbox.com/