MySql

[Swampy]

What are you folk using to connect remotely to your mysql database?

[Blue Steel]

I don't .,. I just use phpmyadmin. opening up your database to remote login is a huge security risk.
I've seen several sites taken down by making it open so that they could generate offline forum CD's .. and someone else has got in while they were doing it.. so i say just "DON 'T DO IT" lol

[Swampy]

I don't .,. I just use phpmyadmin. opening up your database to remote login is a huge security risk.
I've seen several sites taken down by making it open so that they could generate offline forum CD's .. and someone else has got in while they were doing it.. so i say just "DON 'T DO IT" lol

I hear you but when you have some tables larger than  phpmyadmin allowable limits you have to go the remote method.

[Blue Steel]

i'd suggest getting the sys admin to edit the phpmyadmin cfg file to allow it then I'm sure they have a setting in there that can be edited..

[IchBin]

There are certainly other scripts you can use that don't require you to open remote access. Bigdump is one that comes to mind.

[Swampy]

Thanks for the advise !

[Ardos]

I prefer Navicat Lite.

However, I never knew remote connection could be a security risk .

[IchBin]

I could give you an example that I just found the other day while at work. I was viewing a site that I frequent. It's a site written in php. They for some reason, didn't turn error reporting off. When I hit a page, it gave me an error pointing at one of their config files. I thought for fun, I'd see if I could hit their config file directly. It turns out, that their server wasn't setup properly, and instead of not parsing the config file, it showed me the file in full text. I now had their database username and password. Next I did a nmap from my linux machine and found that they had their mysql port wide open to the world. So guess what? Now I had complete access to read, write, and delete anything from their database. How scary is that? lol I sent the guy an email telling him he needed to fix things up. No response yet...

People need to make sure servers are secure. If you can eliminate anything like closing down ports and services that should not be accessible, then by all means do it! If you actually need to open Mysql for your access, put a firewall rule in to only allow your specific IP.

[Ardos]

Wow. Sounds kinda like a nightmare. But thanks for the tips, I'm going to start looking into that kinda stuff.