title: Setting up application privileges in MySQL
body: <p>Say you created a blog application, and it's data is stored in a MySQL database. In your application configuration you set the data source name to <code>myBlog</code> user <code>root</code> password <code>whatever</code> </p>
  
  <p>Now, when users start using your blog to access, post to, and comment on threads, etc... I am assuming they connect as <code>root</code> through the application <code>myblog</code> ...</p>
  
  <p>So... users connect to the application <code>myBlog</code> who in turn connects to MySQL as user <code>root</code> , using password <code>whatever</code> --- it's not really the users that are connecting to MySQL, it's the application. Correct?</p>
  
  <p>Is there not a security issue with this approach? Should I create a new username in MySQL for the application <code>myBlog</code> with specific privileges and leave <code>root</code> only for administering the database?</p>