Respondendo,
quinta-feira, 27 de fevereiro de 2003, 13:32:39, Mensagem Original:
AN Are you using Windows? If so, this root/mysql user talk will be
AN meaningless. You can still make the directory secure and only touchable
AN by the user that mysql is running as. Is this what you need?
nope ,
Hi Dyego,
On Wed, Feb 26, 2003 at 04:04:36PM -0300, Dyego Souza do Carmo wrote:
MM You should use the filesystem security your operating system provides to
MM prevent common users from copying the database files. The directory that
MM the database files resides in only needs to allow access
Are you using Windows? If so, this root/mysql user talk will be
meaningless. You can still make the directory secure and only touchable
by the user that mysql is running as. Is this what you need?
-Original Message-
From: Dyego Souza do Carmo [mailto:[EMAIL PROTECTED]
Sent:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Dyego Souza do Carmo wrote:
I'm using MySQL-Pro+InnoDB 4.0.11 and i have a BIG problem...
My users is hacking the database because the MySQL system tables are
stored in .MYD format and to hack database is simple , only rename
the database and copy the
Hi,
The problem is not with MySQL. The problem is with the users having access to the
database files. Lock up the directory that the files are stored in so that only user
MySQL and the administrator (root) can access them. Also, revoke the privileges of any
user, other than MySQL and the
Dyego Souza do Carmo wrote:
Tanks
Tanks very much
uh, we have war already??
(sorry couldn't resist)
--
Manuel Kiessling
sql,query,innodb,mysql
-
Before posting, please check:
http://www.mysql.com/manual.php
If the databases are owned by mysql.mysql, how can this happen?
You don't allow users to become the mysql user, do you?
Dyego Souza do Carmo wrote:
I'm using MySQL-Pro+InnoDB 4.0.11 and i have a BIG problem...
My users is hacking the database because the MySQL system tables are
stored in .MYD
MM You should use the filesystem security your operating system provides to
MM prevent common users from copying the database files. The directory that
MM the database files resides in only needs to allow access by the user
MM that the MySQL server is running as. If you do this, only users who
I your customers have root access to their machine, then there is no
security, nor can there be.
Dyego Souza do Carmo wrote:
MM You should use the filesystem security your operating system provides to
MM prevent common users from copying the database files. The directory that
MM the database
