473,378 Members | 1,333 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,378 software developers and data experts.

Problem regarding Confining a user for securing MYSQL

omerbutt
638 512MB
hi every one I am A new Bee to php mysql and i was surfing through the net to learn about how to secure the mysql when you are working in a web environment while working with php html and javascript i came through this article
http://articles.techrepublic.com.com/5100-6350_11-5287638.html
and before i proceede i must tell you that iam using win xp professional sp2

where were given two main and very first step before you start making your program or start using your database
the first stepDefine your Users was alright i got that and did it but when i reached
the second step Confine your users i was confused to how to run my database in chrooted environment i mean i have installed XAMP and i have installed it onother than c:\ drive but how can i "Remove the Everyone group, add the MySQL group, and give full control to the directory structure."
isnt this thing the one that i did in the first step creating the user, what I dont think so ,here is the second step
Confine your users

Allowing a remote user to run a process on your server is inherently dangerous, but it happens every time you open a Web page or run a network application. The key to securing this remote access is limiting the local resource structure to a specific user process.

You can confine remote access to MySQL by running your database in a chroot environment. (Chroot changes the root directory and restricts a process to an isolated subset of the file system.)

[b]Windows Server 2000 or Windows Server 2003[b]
Follow the installation instructions, and install the database on a separate drive from your system drive (typically C:). Remove the Everyone group, add the MySQL group, and give full control to the directory structure.

If your database is colocated on your Web server, you need to disable access to TCP port 3306. This eliminates direct attacks from remote connections.
thanks for any help in this regard, and would be higly appreciated
regards omer
Mar 8 '08 #1
4 1690
ronverdonk
4,258 Expert 4TB
You are double posting!! with thread hi,][quote=mageswar005]hi, , Changing the thread title does not help to avoid this. Do not do this again. The new thread will be removed.

moderator
Mar 14 '08 #2
omerbutt
638 512MB
[quote=ronverdonk]You are double posting!! with thread hi,]
hi,
, Changing the thread title does not help to avoid this. Do not do this again. The new thread will be removed.

moderator
i apologise that but i thaught that i might have not given an appropriate topic name because of which there hasnt been any reply so far and as i could nit change the topic now so i thaught i might post it again with a better topic thats why.
but i would be careful next time ,
My apologies,
Omer Aslam.
Mar 15 '08 #3
ronverdonk
4,258 Expert 4TB
Ok Omer, I understand and it is okay. See you.

Ronald
Mar 15 '08 #4
omerbutt
638 512MB
Ok Omer, I understand and it is okay. See you.

Ronald
:) thanks sir
regards,
omer
Mar 18 '08 #5

Sign in to post your reply or Sign up for a free account.

Similar topics

0
by: NotGiven | last post by:
I read several web sites and O'Reilly's book on MySQL about securing the system tables. I removed several users and, as advised inthe book and web sites, changed the user "root" to another name...
0
by: Massimo Fiorentino | last post by:
Hello there! I am a bit of a newbee into the mySQL world and I have a question regarding switching from one DB to another. I have for a couple of years used a very simple CMS-system created by...
1
by: notbob | last post by:
Newb here! Using 4.0.20 on Slack. Slogging through the official manual. At 2.4.3 Securing the Initial MySQL Accounts, I'm finally stopped cold while trying to follow instructions. Here's what I...
1
by: ejpoirier | last post by:
I'm trying to get https to work for Web Services in PHP. I've installed PHP 5.0.5 with the following configuration line: ../configure --with-mysql=/usr/local/mysql \...
4
by: Stephen Poley | last post by:
Whenever anyone has a question about securing an Access database he/she is usually referred (unsurprisingly) to the Security FAQ. This is however incomplete/unclear with respect to databases with a...
0
by: Aahz | last post by:
I have asp.net web site that connects on mysql databse via ODBC. From time to time it happen that connection is just being lost by itself, visitor got error message. Then I just log into my control...
4
by: Daniel | last post by:
is there a way to detect if a user tries to access a php file? For instance, db.config.php is called in many php pages but should never actually be open directly. Is there a way to know if...
19
by: Jim | last post by:
Hi, I have two questions/problems pertaining to CSS horizontal dropdown menus and am hoping that someone here can help me out. (1) I'm having a problem centering the menu. I picked up the...
1
by: pantone187 | last post by:
Hi everyone, I'm a pretty novice PHP programmer as all I've done so far is to do simple registration forms for events. The data that's going from the from to the database (mySQL) didn't need much...
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 3 Apr 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome former...
0
by: ryjfgjl | last post by:
In our work, we often need to import Excel data into databases (such as MySQL, SQL Server, Oracle) for data analysis and processing. Usually, we use database tools like Navicat or the Excel import...
0
by: Charles Arthur | last post by:
How do i turn on java script on a villaon, callus and itel keypad mobile phone
0
by: ryjfgjl | last post by:
If we have dozens or hundreds of excel to import into the database, if we use the excel import function provided by database editors such as navicat, it will be extremely tedious and time-consuming...
0
BarryA
by: BarryA | last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
1
by: nemocccc | last post by:
hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?
1
by: Sonnysonu | last post by:
This is the data of csv file 1 2 3 1 2 3 1 2 3 1 2 3 2 3 2 3 3 the lengths should be different i have to store the data by column-wise with in the specific length. suppose the i have to...
0
by: Hystou | last post by:
There are some requirements for setting up RAID: 1. The motherboard and BIOS support RAID configuration. 2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.