D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Default mysql user name and password

 

Neil Williams wrote:
On Saturday 27 August 2005 4:41 pm, Thomas Arrow wrote:

Thanks
Right I'v got in with that user and password. Now how do I change the
password?


Are you SURE you want to?

This would prevent other applications that use MySQL from installing as their databases could not be created by the installation scripts.

Only do that if this is a server which won't have new software installed later.

You could be surprised which packages may use MySQL tables - the first thing you'd know was when the installation barffed.


As the default password is blank anyone could access the database with all the privileges available. So yes I would set a root password. Any application that requires you to use a set default or blank password is a bit rubbish.

Plus, I would make sure that any application, or websites, have their own mysql user, limited to only the databases they that need. Otherwise each application / web site would be able to trash any others.

I could of course misunderstood what you are saying, but having an open root user or applications able to access / modify databases of each other is asking for trouble.

--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe. FAQ: www.dcglug.org.uk/linux_adm/list-faq.html