What are the recommended database permissions for WordPress?

2 Views

I just got WP running on my own server. I am not trying to lock things down more. What permissions should the db user have to my WP db?

Post Views: 2

Related posts

Leave a Reply

5 comments

  1. If you did want to lock things down…. a normal wordpress site will usually only require the database user to have SELECT, INSERT, UPDATE and DELETE.

    If you want to use the automatic update feature it will also require CREATE and ALTER.

    Some plugins may require other permissions but most won’t.

  2. WordPress only uses one DB user for everything, and he’ll need to have all permissions to the database. CREATE and ALTER are used when upgrading, sometimes. INSERT, UPDATE, and SELECT are used all the time.

  3. I’ve asked a similar but a bit more detailed question lately: MySQL Database User: Which Privileges are needed?

    The short installation instruction for WordPress (“5 Minutes”) state that:

    Create a database for WordPress on your web server, as well as a MySQL user who has all privileges for accessing and modifying it.

    This is the minimum of privileges / permissions that are needed and next to those, others are not needed.

    So if your user has more privileges than those, you can reduce them.

  5. The answer is all privileges. This is taken straight from the wordpress install page here
    Look at the phpMyAdmin section and it states “Click Check All to select all privileges.