@tbworld
Thanks for your comments. I take your points, but I still think vB could manage with 2 users, one with insert/update/delete on appropriate tables to allow users to register and contribute, with another with the more risky alter/drop/etc privileges.
My point is that you could easily implement this yourself. I doubt vBulletin is going to modify the vb3 or vb4 product, but your suggestion is valid for vb5. You can easily deny those privileges (as you know) to the databases active user for vBulletin and grant raised privileges to another database user. In the most simplistic form of this: you would have to modify the config.php file so vBulletin new about this new privileged database user when you logged in to the ACP.
How much safer this all is... well that is a bigger debate.
10-23-2014, 05:49 PM
Threaded Mode