Skip to main content

Posts

Showing posts from July, 2008

Securing MySQL (Java / Php Developers)

This Article would be useful to the people those who are using MySQL on a server connected to the Internet and hosted a web application (Developed using Java or/and PHP) on same server. This would also allow users to avoid a common security mistakes and Java developer to understand an issue related to UNIX socket. Usually MySQL uses port 3306 by default. This port should not be accessible from un-trusted hosts and should be closed, unless you really have a good reason to keep it open . This can be done on Server’s firewall or router, however M ySql provides its own security options like 1. skip-networking 2. bind-address 1. skip_networking This option was added in MySQL 3.22.23 and is recommended for systems where only local clients are allowed.To enable this option, put “skip-networking” in the mysql configuration file (/etc/mysql/my.conf). If this option is ON the server allows only local (non-TCP/IP) connections. Any clients (even clients running on the same host) using the remote