I use a shared hosting. To ensure security whenever I am not working on the site I always ask my hosting provider to set immutable attribute on files:
sudo chattr +i -R
So, files are secure.
But the database is not.
I think, maybe I could enter phpMyAdmin and revoke all the privileges from the user except "select". Frankly speaking, maybe nobody needs those privileges when I’m nod adjusting the site: comments are done via Disqus.
Could you tell me whether this is a good idea or not?
And if yes, what commands can be executed?