[prev in list] [next in list] [prev in thread] [next in thread] 

List:       phpauction
Subject:    Re[2]: [PHPAUCTION]
From:       Gianluca Baldo <webmaster () albasoftware ! com>
Date:       2000-04-29 17:24:10
[Download RAW message or body]


c> You shouldn't leave the user root on the config.inc file, the first thing you
c> have definitivelly gotta do is change this user to a user that you create with
c> the needed grants, although i think that's out of the scope of phpauction, it's
c> got more to do with MySQL security, read MySQL's manual, that's a good starting
c> place for securing your server, as well as tweaking it for performance
c> improvement.
That's absolutely correct. The "root" MySQL user should be changed to
someother you create "ad hoc" or you already have defined.
We need to add some notes about that in the README file. Any
volunteer?

Cheers,
       Gianluca

c> CYA later

c> On Fri, 28 Apr 2000, you wrote:
>> Hi all,
>> Ok Ok so I am stupid. ;-)
>> I figured out what my problem was with MySQL.
>> I had the script pointing to the wrong database.
>> 
>> But there is still the error at the top of the page about calling the cookie after sending the header.
>> Any ideas?
>> 
>> I have another question about security.
>> 
>> I was having trouble makeing MySQL work (Mostly because I am new to MySQL) so I
>> installed phpMyAdmin and found that I can have access to all of the databases on
>> the whole server, (I changed the configurations so I only have
>> access to my own database now.) but  If I can do this what is to keep other
>> people from doing the same thing and gaining access to everything?
>> 
>> Thanks,
>> Roy
>> 
>> _________________________________
>> Free Software, Tools & Training.
>> Free Internet Access!
>> http://www.shadowmall.com/
>> --PHPAUCTION MAILING LIST


--
BCNINÉDITA
Aribau 70 3º 2ª
08011 BARCELONA
Tel.934540099 - Fax. 934541979
@@ ICQ 47323154 @@
gianlucab@bcninedita.com
http://www.bcninedita.com


--PHPAUCTION MAILING LIST

[prev in list] [next in list] [prev in thread] [next in thread]