Page 1 of 1
Locking down MySql
Posted: Sat Jun 30, 2007 7:32 pm
by mabsey
Hi everyone,
Is there a way to lock down mysql so it only accepts connections from the Local Host?
Thanks
Mabs
Posted: Sat Jun 30, 2007 7:43 pm
by superdezign
Who else has access to it??
Posted: Sat Jun 30, 2007 8:05 pm
by Benjamin
You can specify user privileges including whether or not they are allowed to access databases remotely. You can also disable access remotely to MySQL completely in the my.cnf file.
Posted: Sun Jul 01, 2007 4:34 am
by mabsey
superdezign wrote:Who else has access to it??
Just myself.
I ideally what I would like to say is. Only allow the IP address of my machine to connect and also allow all server side scripts to run. If it means I have to lock it down to server side only and access the database via the web interface I will.
Mabsey
Posted: Sun Jul 01, 2007 4:42 am
by Benjamin
All you have to do then is ensure that every MySQL user only has access from localhost. Then you can create a single account that has remote access for you to use remotely. You can do this in phpMyAdmin if your not sure how to.
Other solutions would be to disable all remote access, then create a tunnel over SSH and access the database that way.
Posted: Sun Jul 01, 2007 6:04 am
by superdezign
mabsey wrote:Only allow the IP address of my machine to connect and also allow all server side scripts to run.
Like, an administration section? The admin section is only as secure as you make it.