PDA

View Full Version : mysql connection issue


ComputerVitals
Thu 14th Dec '06, 6:23pm
I have VPS with WHM/Cpanel

When I create a new account, the new account will only be able to see there database when in the built in phpmyadmin in cpanel.

But, I have noticed with a test script, and with installing other software, then if my main account, or any other on the VPS, if the user and pass is know for the database you can connect to it.

How can I make it so each user wont be able to connect to any other database on my VPS.

Example:
test1.computervitals.com
test2.computervitals.com
test1 can only see his database. But if I install vB on test1 account, I can use the db info for test2 and it will connect.

How can I stop that?

eva2000
Sat 16th Dec '06, 10:26am
Don't think you can unless you know the end user has a static ip address you set grant privileges tied to the users ip address so only user with ip address x could connect with username/password to a certain database.

The whole point is passwords should be unique and secure and never fall into someone else's hands

http://dev.mysql.com/doc/refman/4.1/en/user-account-management.html

Keeping passwords secure - never pass mysql password on command line rather leave it blank for a prompt after -p option
http://dev.mysql.com/doc/refman/4.1/en/password-security.html

Use secure connections
http://dev.mysql.com/doc/refman/4.1/en/secure-connections.html

ComputerVitals
Sun 17th Dec '06, 12:47pm
Thanks for the information.
I did send a ticket into my host and they told me it can't be done. Basically said the same thing, User and pass is all mysql looks at, not what domain it's coming from.