php 配置文件的 PhpMyAdmin 安全警告
声明:本页面是StackOverFlow热门问题的中英对照翻译,遵循CC BY-SA 4.0协议,如果您需要使用它,必须同样遵循CC BY-SA许可,注明原文地址和作者信息,同时你必须将它归于原作者(不是我):StackOverFlow
原文地址: http://stackoverflow.com/questions/9054374/
Warning: these are provided under cc-by-sa 4.0 license. You are free to use/share it, But you must attribute it to the original authors (not me):
StackOverFlow
PhpMyAdmin security warning for configuration files
提问by Vishal Sharma
Your configuration file contains settings (root with no password) that correspond to the default MySQL privileged account. Your MySQL server is running with this default, is open to intrusion, and you really should fix this security hole by setting a password for user 'root'.
您的配置文件包含与默认 MySQL 特权帐户对应的设置(没有密码的 root)。您的 MySQL 服务器正在使用此默认值运行,对入侵开放,您确实应该通过为用户“root”设置密码来修复此安全漏洞。
I got this when I opened up phpmyadmin ...
当我打开 phpmyadmin 时我得到了这个...
Any way to fix this?
有任何解决这个问题的方法吗?
回答by Sabari
It's just a warning to show that there is no password for the default user root. If you want to set password for root:
这只是一个警告,表明默认用户 root 没有密码。如果要为 root 设置密码:
- Open phpmyadmin interface
- Click "Users" tab
- Select user "root"
- Edit Privileges
- Change password
- 打开phpmyadmin界面
- 单击“用户”选项卡
- 选择用户“root”
- 编辑权限
- 更改密码
回答by Frankie
Sure, set up a password for user root
.
当然,为 user 设置密码root
。
You can do that two ways, using the console and typing something like:
您可以通过两种方式执行此操作,使用控制台并键入以下内容:
mysqladmin -u root password NEWPASSWORD
Or you can go through phpMyAdmin interface, go to users, select root and change it's password.
或者您可以通过 phpMyAdmin 界面,转到用户,选择 root 并更改其密码。
回答by lorenzo-s
The message simply warns you that you are using the default MySQL user (username root
with no password) to get complete acces to MySQL server.
该消息只是警告您,您正在使用默认 MySQL 用户(root
无密码的用户名)来完全访问 MySQL 服务器。
Just change your MySQL server root
password and edit your PhpMyAdmin configuration to include the new password.
只需更改您的 MySQL 服务器root
密码并编辑您的 PhpMyAdmin 配置以包含新密码。
If you get this on a local machine not accessible from outside (i.e. your personal local development server), you should not worry about that.
如果您在无法从外部访问的本地机器(即您的个人本地开发服务器)上获得它,则不必担心。