RE: [PHP-DEV] Autotests: Access denied for user 'root'@'localhost' (using password: NO)
| From: | Mike Robinson | Date: | Thu, 18 Aug 2011 15:55:18 +0000 |
| Subject: | RE: [PHP-DEV] Autotests: Access denied for user 'root'@'localhost' (using password: NO) | ||
| References: | 1 2 3 4 5 6 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-54692@lists.php.net to get a copy of this message | ||
On August-17-11 8:04 PM Roger Llopart Pla wrote:
> That use, or, if it's a development machine, leave it as it is since it
> does it's work just fine.
>
> 2011/8/18 Reindl Harald <h.reindl@thelounge.net>
>
> >
> >
> > Am 18.08.2011 01:30, schrieb Stas Malyshev:
> > > Hi!
> > >
> > >> well but using root as default is a little bit crazy
> > >> using user "test" with empty password is acceptable but root????
> > >>
> > >
> > > It's not _that_ root. For mysql, it's just a default user name.
> > > Most people would run it on development machines with mysql
> > > configured not to answer to network, so it's not of a problem
> >
> > it IS THAT root of mysql
> >
> > please do not believe i think it has anything to do with system-root
> > i am doing this job now since ten years :-)
> >
> > using a build/test-server with mysql-driven pure-ftpd and phpmyadmin
> > while having horde-webmail also on the test-machine and you are f**ed
> > with a mysql-root without password
> >
> > the only sense for the default-root without pwd in mysql is to
> > enter "mysql -u root" and set your pwd directly after install
It strikes me that the out-of-the-box test only works on a fresh clean
install of MySQL. The install docs for MySQL strongly recommend changing
that immediately after the install - which I think most people do - so
I doubt very much those are the credentials for the vast majority of
MySQL installs in the world.
I'm wondering if adding a prompt for the mysql username and password,
with the defaults set as is, would be possible, and if so, if someone
were to offer a patch why it shouldn't be considered.
IMHO, if the defaults were used and the tests ran successfully, I'd
be tempted to display a console message along the lines of "your myself
default root credentials are wide open, are you being silly?"
Best Regards,
Mike Robinson