[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] phpMyAdmin multi-user



> I have done this, but wouldn't any user be able to install their own
> phpMyAdmin on their on virtual site and see all the databases? (even if
> they can't access them?).

At least anyone can see them if they log in on mysql via telnet/SSH.

I often experience users on my machine putting their MySQL passwords in
un-protected files in their public /www area. Unfortunate as it is, knowing
the names of databases on the box reduces the task of finding password to
typing grep known_db_name *

In short I, too, would like to limit user's ability to view names of
databases. Is there a way to prevent this at the level of MySQL?


Per M Knutsen
http://nethut.no/~pknutsen