I’m working on a pretty basic CMS for some friends of mine. I made a database for the articles, users and other entities the CMS is going to need.
And of course, it will need an administrator account for loging into the admin panel.
But I don’t know what the safest way for keeping administrator details is. Is it safe to store them with the general users, or should I make a special table for them?
I’m not sure if this is the safest way to keep these important details. So do any of you think I should forget about the database after all, and use another secure way of keeping this data?
Thanks,
-Robin
Assuming that the passwords are stored safely (salted hashes if you are storing passwords), there is no need to treat an administrator differently from a regular user. An administrator simply has more rights that are defined in the users table (like for example a user level or a super-user status) or a separate role table.