Tagged Questions
0
votes
2answers
51 views
Can I configure MySQL's typecasting to consider 0 != 'foo'?
This article points out the following security problem with MySQL:
USERS
id | email | password_reset_token
1 | one@example.com | QTlXww)uV!Hdg3U6aGwKV2FPvAqzVgPx
2 | two@example.com | ...
3
votes
1answer
85 views
Make sure MySQL is not accepting remote connections
I am currently doing development for a LAMP-based website. I do not know what configuration changes have been made to MySQL since it was installed on our server. The way that we use MySQL, there is no ...
0
votes
1answer
142 views
Saving every mysql user login attempts
Is there a way to save the username and the IP from which the user tries to login to a MySQL server??
Enabling general-log seems to log everything but that seems to write too much details taking more ...
1
vote
1answer
215 views
How to properly secure MySQL database?
We have a web application based on the famous triad apache + php + mysql which we sell to our customers and gets installed on their servers.
Currently, we are using MySQL 5.1.41 which has only a ...
2
votes
2answers
382 views
Encrypt MySQL database on a Linux VPS?
I'm working on a rails app for our church, which stores some fairly sensitive information about our people in a MySQL database.
We have our own windows server running Hyper-V so the original ...
1
vote
1answer
89 views
MySQL Database Temporarily Compromised?
Two days ago, I had connected to my ClearDB test server with MySQL workbench. I had left this workbench open and when I had checked it today, there were two new schemas named "test_justin" and ...
3
votes
1answer
59 views
Administration of MySQL Users
What is the best practice for keeping and maintaining MySQL users? Say for example I have 5 programmers and a PHP application connecting to a database. Should I create 6 different users 1 for each ...
2
votes
2answers
739 views
Best practices to secure mysql
I don't have that much knowledge about mysql and i would like to secure a MySQL server.
We have a few VPS running around the world (6 currently) and they all need to store information in our mySQL ...
5
votes
2answers
131 views
MySQL Permissions Necessary To Reset Password
On my team there is a desire for some users to periodically update their MySQL password.
Our MySQL server is shared between a few projects (and certain users are assigned to certain projects). If I'm ...
1
vote
1answer
491 views
User has no password set
I see these when running MySQLTuner.pl:
-------- Security Recommendations -------------------------------------------
[!!] User '@debian' has no password set.
[!!] User '@localhost' has no password ...
2
votes
2answers
100 views
What is this host?
I found this in my local MySQL installation today:
mysql> select host, user from user;
+--------------+---------+
| host | user |
+--------------+---------+
| ::1 | root |
| ...
12
votes
1answer
688 views
MySQL : Why are there “test” entries in mysql.db?
Recently, I posted an answer to a question about mysql.db.
Then, I got to thinking I should ask everyone this question:
I have noticed for years that upon installation of MySQL 5.0+, mysql.db is ...
1
vote
1answer
146 views
Randomly generated password for mysql admin over time?
I have this idea of making my database's Admin account secured by creating the following:
Trigger is activated every hour in mysql this trigger activates a stored procedure
Stored procedure ...
1
vote
3answers
637 views
MySQL SSL disabled on Windows
I want to enable an SSL connection to my database. I've created SSL certificates and so on, however SSL remains disabled:
mysql> show variables like '%ssl%';
...
1
vote
1answer
156 views
How to do MySQL User Accounting
I can't seem to find any information on this anywhere. I found a question here called Monitor MySQL activity per database? but that's not quite the answer either.
I'd like to be able to log the ...
3
votes
1answer
132 views
Help configuring MySQL install for remote connections / root accounts understanding
I installed mysql/phpmyadmin/apache on a linux box for internal network use only. I don't have the strongest understanding of MySQL.
Hostname: server.domain.lan
IP: 192.168.0.54
After I installed ...
4
votes
2answers
330 views
different login credentials based on user
I run a PHP symfony-framework web app for my company and it uses a single database login for all connections, whether the user is an admin or a client.
I know that higher security systems often use ...
14
votes
6answers
247 views
Securing DB passwords
Looking at the structure of most PHP/MySQL-based websites I've seen, it appears that it's not terribly difficult to discern the database password if you dig a bit, as there's invariably a setup or ...
8
votes
3answers
1k views
MySQL LDAP authentication
Is LDAP authentication and authorization in MySQL possible? What are the requirements (MySQL version, third-party software etc.)? How it's organized?
Thanks.
