MySQL database security configuration and application guide

MySQL has become one of the most widely used databases on the network, especially for Web applications. It occupies the absolute advantage of Small and Medium applications. All of this comes from its small and easy-to-use, secure and effective, open license, and multi-platform. What's more, it works perfectly with PHP, one of the three major Web languages.

Unfortunately, a default MySQL installation will cause overflow due to the empty root password and program vulnerability, making the MySQL Installation server frequently attacked. More seriously, the database is often damaged after being attacked, which may cause disastrous consequences. The following describes how to protect data.

Environment requirements

1. system environment:

There is a Red Hat Linux 9.0 custom Installation server. The system has installed GCC and some software packages, such as Apache and PHP. The first thing after installing the system is to upgrade the system software package. As a Web server, the system accepts requests from PHP scripts, and PHP uses the MySQL database to be installed below as the contact for Dynamic Release.

The requirements for partitioning are similar to those for general systems. The only difference is that the/chroot and/tmp created later must be in the same partition.

2. Security Requirements:

(1) MySQL runs in an independent (Chroot) Environment;

(2) The mysqld process runs in an independent user/user group. The user and user group have no root directory, Shell, or other programs;

(3) modify the root account of MySQL and use a complex password;

(4) only allow local connection to MySQL. The network connection is disabled when MySQL is started;

(5) Ensure that the nobody account used to connect to MySQL is disabled;

(6) Delete the test database.

1 2 3 4 5 Next Page

[Content navigation]
Page 1: environment requirements	Page 2nd: Install MySQL
Page 3rd: Install MySQL	Page 1: Configure servers
Page 1: PHP and MySQL communication, self-starting Configuration