anonymous login in mysql? - 未名空间MITBBS历史存档

国际科技财经博客移民网络热点娱乐民生时事公众号

Redian新闻

>未名空间

>Database - 数据库

anonymous login in mysql?

anonymous login in mysql?# Database - 数据库

j*y2003-06-12 07:06

1 楼

Hi, all:
In setting up the password for the root user, I have used the command
DELETE FROM user WHERE Host='localhost' AND User='';
It is used to delete the anonymous users, and prevent them from logging in.
Yet, when I use "mysql -u abc" to login, it still can be successful.
Haven't I deleted the anonymous users from the user tables? I have checked my
user table again, only "root" and "mysql" are present. No other users in the
table.
Then how can user "abc" to log in?
thanks for any suggestions

L*t2003-06-12 07:06

2 楼

To add a user, first log in as root
shell> mysql -u root -p
Then you can add new users by issuing GRANT statements:
mysql> GRANT ALL PRIVILEGES ON *.* TO [email protected]
-> IDENTIFIED BY 'some_pass' WITH GRANT OPTION;
mysql> GRANT ALL PRIVILEGES ON *.* TO [email protected]"%"
-> IDENTIFIED BY 'some_pass' WITH GRANT OPTION;
mysql> GRANT RELOAD,PROCESS ON *.* TO [email protected];
mysql> GRANT USAGE ON *.* TO [email protected];

j*y2003-06-12 07:06

3 楼

thanks, but my question is: how to prevent anonymous users from logging in.
any further suggestions?

【在 L**********t 的大作中提到】

: To add a user, first log in as root
: shell> mysql -u root -p
: Then you can add new users by issuing GRANT statements:
: mysql> GRANT ALL PRIVILEGES ON *.* TO [email protected]
: -> IDENTIFIED BY 'some_pass' WITH GRANT OPTION;
: mysql> GRANT ALL PRIVILEGES ON *.* TO [email protected]"%"
: -> IDENTIFIED BY 'some_pass' WITH GRANT OPTION;
: mysql> GRANT RELOAD,PROCESS ON *.* TO [email protected];
: mysql> GRANT USAGE ON *.* TO [email protected];

l*u2003-06-12 07:06

4 楼

By default mysql allows local user (from localhost) to login
without password. These users can only use database "test".
I don't know how to disable it. An easy way is to delete
database "test", thus anonymous user can do few things.
Digging the manual of mysql, you might find way to disable
anonymous login.

【在 j***y 的大作中提到】

: thanks, but my question is: how to prevent anonymous users from logging in.
: any further suggestions?

L*t2003-06-12 07:06

5 楼

After you logged in as root, did you try the following?
mysql> use mysql
mysql > delete from user where user = "";
Try this to see if it works or not.

【在 j***y 的大作中提到】

: thanks, but my question is: how to prevent anonymous users from logging in.
: any further suggestions?

j*y2003-06-12 07:06

6 楼

yes, i did it.
thanks for your suggestion.
i've got the answer.
the anonymous users can't be forbidden to login completely, because mysql is
designed to let them user the "test" database, or the database start with
"test_".
i have logged in as an anonymous user, and try the command "use xxx;" (xxx is
the database name except for "test" or "test_*"). and i got an access denied
error message, this confirms that anonymous users can only operate on the
"test" databases, and that's secure enough.
tha

【在 L**********t 的大作中提到】

: After you logged in as root, did you try the following?
: mysql> use mysql
: mysql > delete from user where user = "";
: Try this to see if it works or not.