I have transferred a PHP/mySQL site to a different ISP. The clients want to protect access. I don't really want to change the Admin login - that is programmed using salt.
I was thinking of creating a new u/p with admin (not root) privileges for them, and disabling the root password in their database.
Does anyone see any issues with this approach?