Re: Security alert: phpmyadmin

[Tonu Samuel]

Van wrote:

> Thanks for the heads up.  Should it matter that someone could make a modified
> client for this user if the following are in place?
> 
> 1.      Firewall on MySQL port to DENY all but trusted hosts;
> 2.      No grants for this user except localhost;

running MySQL server with flag --skip-networking even more effective :).
Seriously.

> 3.      Only grant is select on mysql.user for the user in PHPMyAdmin.


-- 
+----------------------------------------------------------------+
| TcX  ____  __     _____   _____  ___                           |
|     /*/\*\/\*\   /*/ \*\ /*/ \*\ |*|     Tõnu Samuel           |
|    /*/ /*/ /*/   \*\_   |*|   |*||*|     tonu@stripped        |
|   /*/ /*/ /*/\*\/*/  \*\|*|   |*||*|     Tallinn, Estonia      |
|  /*/     /*/  /*/\*\_/*/ \*\_/*/ |*|____                       |
|  ^^^^^^^^^^^^/*/^^^^^^^^^^^\*\^^^^^^^^^^^                      |
|             /*/             \*\                Developers Team |
+----------------------------------------------------------------+