Use read-only database user to minimize security risks I want to phase out an old, unmaintained Drupal 6 page. The website should still stay online, but should be read-only.
I want to change the database user so that it only has read privileges. I don't want the website to be exploitable due to any security issue in Drupal 6 or any of the modules.
Is it possible to give Drupal 6 a read-only database user? On which table is write access necessary?
You can make make read only tables, except: semaphor, watchdog, cache, cache_[ANOTHERS], sessions, and another tables, depend on installed modules, that can modify tables on guests visiting, login or form submissions, like statistics, flag and so on.
But I strongly DO NOT recommend this, because instead of showing read only site you may show white or errors screen.
Better is use Read only mode module, that make site read only (prevent form submissions and so on).
Another solution - make backup, then restore 1 per day via bash script. Samples.