[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] mySQL & security

Yes I would stay away from that.  Not really a security risk to anyone but
him, but it could be a resource hog for your box, expecially is he shares
the username and password.  Better to just set it to localhost and make
him ssh or telnet in.

On Sun, 16 Jan 2000, Goran Blagus wrote:

> Hello !
> 
> We have user who wants from us to put '%' as host in host table.
> 
> insert into host
> (host,db,Select_priv,Insert_priv,Update_priv, 
> Delete_priv,Create_priv,Drop_priv)
> values
> ('%','his_database','Y', 'Y', 'Y', 'Y', 'Y', 'Y');
> 
> What do you thing about it ? Isn't to risky to allow _EVERY_ internet host 
> conection to mySQL on our server ?
> 
> Goran
> 
> 
> 
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-users
> 

Rik Thomas rikt@xxxxxxxxxxxx
http://www.delaware.net
(p) 302.736.5515