How to delete guest user

[Ted Ward]

Hi all. I have MySQL 4.0.18 and phpMyAdmin running on a FreeBSD box.
The other day a student told me he logged on to my phpMyAdmin by
specifying "guest" as the user and no password. I don't have a guest
user in my user table and can't seem to find any documentation on how
to disable this. It makes me a little nervous.

Ted

[Aggro]

Ted Ward wrote:

Hi all. I have MySQL 4.0.18 and phpMyAdmin running on a FreeBSD box.
The other day a student told me he logged on to my phpMyAdmin by
specifying "guest" as the user and no password. I don't have a guest
user in my user table and can't seem to find any documentation on how
to disable this. It makes me a little nervous.

Did he log in from remote or local location? The "guest" is a actually a
user with no username at all, you should find that. You could use any
username with no password to do the same, and that is by default allowed
from local machine only.

[David G. Graham]

Ted Ward wrote:

Hi all. I have MySQL 4.0.18 and phpMyAdmin running on a FreeBSD box.
The other day a student told me he logged on to my phpMyAdmin by
specifying "guest" as the user and no password. I don't have a guest
user in my user table and can't seem to find any documentation on how
to disable this. It makes me a little nervous.

Ted

MySQL installs with a few security flaws, one of them is anonymous
accounts. Try deleting all your anonymous accounts.

use mysql;
delete from user where User='';
delete from db where User='';
flush privileges;
Then test using the guest account.

Hope this helps,

David G.