mysql safety

**jonniejoejonson** · 30th July 2009

if you have mysql installed or are running phpmyadmin, Your password for root access is stored in a file.. is this not a security risk?...
please let me know what i can do to stop people from hacking the root password... regards J

**TerryFroy** · 30th July 2009

Originally Posted by jonniejoejonson

if you have mysql installed or are running phpmyadmin, Your password for root access is stored in a file.. is this not a security risk?

It is only a security risk if you haven't installed PHPmyAdmin correctly.

All you need to do to configure PHPmyAdmin in a secure manner is to unpack the tarball as supplied by the developers, rename the example config file to config.inc and then edit the line which asks you to set a blowfish key.

I would also suggest putting it behind on an SSL-enabled site rather than not; at that point, you can log in using whatever MySQL username/password you choose and you will be restricted to doing whatever that MySQL username is allowed to do.

**JamieBeeston** · 30th July 2009

I think you're misinformed or running on a very insecure system somewhere.

**jonniejoejonson** · 30th July 2009

Thanks for your help guys...
the server was preinstalled with mysql etc...
As you may soon gather, i know very little about servers,
however i thought that there was also a root password in a file somewhere for mysql but as i understand it from Terry froyle it is only the phpmyadmin that is of concern but that should be ok if i add a blowfish key...
thanks guys.

**TerryFroy** · 30th July 2009

Originally Posted by jonniejoejonson

Terry froyle

... is the best misspelling of my name that I've seen in the last five years :-)

**markcastle** · 31st July 2009

Originally Posted by TerryFroy

... is the best misspelling of my name that I've seen in the last five years :-)

Think yourself lucky I've had letters addressed to Mark Cashole and worse.

**HostingPlanet** · 31st July 2009

You can take next steps:
You can simply not store the password in a file
Your root's password must be very difficult to hack
I agree with TerryFroy: SSL also can help it.

**JonWitte** · 31st July 2009

To continue the thread drift, Joan Whitney was my favourite.

**Ed-Freethought** · 31st July 2009

Me: Hi, Edward speaking
Caller: Hi Amy, this is...

Do I *really* sound like an Amy?

**Manuel** · 31st July 2009

I've gone from Manuel Tuthill to Marcel Patel (french india?)

**HostingPlanet** · 31st July 2009

OFF:
It would be better to help topickstarter then to mill the wind

**Pete-CCS** · 31st July 2009

Originally Posted by HostingPlanet

OFF:
It would be better to help topickstarter then to mill the wind

That is hilarious coming from you - it is usually you that un-earths old threads and posts useless two line post counter comments... ROTFLMAO....

**Ed-Freethought** · 31st July 2009

Excuse me whilst I got to mill the wind...

**Pete-CCS** · 31st July 2009

Originally Posted by freethought

Excuse me whilst I got to mill the wind...

Lol, Ed = Windy Miller!

**MH-Nick** · 31st July 2009

Originally Posted by PeteK

... ROTFLMAO....

That did make me Laugh Out Loud

I commonly get Hawkin - they think that's how Steven Hawking is spelt, and believe that's the only spelling of Hawkin*. - And you can guess how the nicknames go from there

Thread: mysql safety

LinkBack

Thread Tools

mysql safety

Thread Information

Users Browsing this Thread

Similar Threads

NSPCC Internet Safety Campaign

Microsoft 's Xbox safety effort

new error? mysql

Posting Permissions