Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 3 Feb 2005 00:24:10 -0800
From:      "Ted Mittelstaedt" <tedm@toybox.placo.com>
To:        "Technical Director" <technical@ultratrends.com>, "Positive Negative" <positiveviolence@gmail.com>
Cc:        freebsd-questions@freebsd.org
Subject:   RE: Access denied for user 'root'@'localhost' (using password: NO)
Message-ID:  <LOBBIFDAGNMAMLGJJCKNMEDGFAAA.tedm@toybox.placo.com>
In-Reply-To: <20050202211111.D64563@server1.ultratrends.com>

next in thread | previous in thread | raw e-mail | index | archive | help


> -----Original Message-----
> From: owner-freebsd-questions@freebsd.org
> [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of Technical
> Director
> Sent: Wednesday, February 02, 2005 8:15 PM
> To: Positive Negative
> Cc: freebsd-questions@freebsd.org
> Subject: Re: Access denied for user 'root'@'localhost' (using password:
> NO)
>
>
>
> Positive Negative,
>
> You might seriously consider not using 'root@localhost' as
> well

I would bet 10 to 1 that he's installing an application that already
is designed NOT to use the mysql root user to access it's database.
This is a case of someone who isn't understanding the design of
the app he's setting up.  It worked only because he was running an
out-of-box sql server install which had nothing for a root password.
He probably misread the instructions and used root instead of the
username that he was supposed to use.

> since most
> php scripts read the username/password information in clear text on a
> nobody:nobody read filesystem. IOW other people can read your files.
>

Do you run php database driven apps on the same server as you use to
provide shell services?  I don't.  If the webserver is configured
right it won't allow remote clients to read the scripts, only execute
them.

Ted



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?LOBBIFDAGNMAMLGJJCKNMEDGFAAA.tedm>