i want to restrict the user to make only select command in mysql , no delete or update or insert

Question

                    MySqlConnection connection = new MySqlConnection(strConnection);
                    MySqlCommand command = connection.CreateCommand();

                    MySqlDataReader reader;
                    command.CommandText = pQuery;
                    connection.Open();
                    reader = command.ExecuteReader();
                    var dataTable = new DataTable();
                    dataTable.Load(reader);

                    connection.Close();

I took the query from text box , I don't want user to delete or change the data in database using text box

how to restrict the command to only select command

thank you

See about user privileges in the manual – Strawberry Jan 18 '18 at 07:26 — Strawberry, Jan 18 '18 at 07:26

Omer Gafar · Answer 1 · 2018-01-18T10:47:37.027

1

you can create user in your database who have only the select permission , and connect to the database using that user. Or you can check the user input if its contains "delete" keyword using Contains Method

if( pQuery.ToUpper.Contains("DELETE") or pQuery.ToUpper.Contains("UPDATE"))
{
// do something
}
else{
                MySqlConnection connection = new MySqlConnection(strConnection);
                MySqlCommand command = connection.CreateCommand();

                MySqlDataReader reader;
                command.CommandText = pQuery;
                connection.Open();
                reader = command.ExecuteReader();
                var dataTable = new DataTable();
                dataTable.Load(reader);

                connection.Close();

   }

edited Jan 18 '18 at 10:47

answered Jan 18 '18 at 07:21

Omer Gafar

129
1
6

but if the user is db Admin he can delete all records , what I need is restriction from c# , in order to select only , and any user of database can only select – ahmed_khudhair Jan 18 '18 at 07:52
I need to do this from c# not from the database – ahmed_khudhair Jan 18 '18 at 07:54
my point is you don't use the admin account in this part of the application – Omer Gafar Jan 18 '18 at 10:30

i want to restrict the user to make only select command in mysql , no delete or update or insert

1 Answers1